Merge pull request #10 from weissaufschwarz/fix-vuln

fix vulnerability
weissaufschwarz · Dec 20, 2024 · f3a6ff0 · f3a6ff0
2 parents a08c678 + e33e446
commit f3a6ff0
Show file tree

Hide file tree

Showing 3 changed files with 118 additions and 102 deletions.
diff --git a/.changeset/serious-snails-kneel.md b/.changeset/serious-snails-kneel.md
@@ -0,0 +1,5 @@
+---
+"@weissaufschwarz/mitthooks-nextjs": patch
+---
+
+FIx vulnerability: If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed.
diff --git a/packages/mitthooks-nextjs/package.json b/packages/mitthooks-nextjs/package.json
@@ -31,6 +31,6 @@
         "@repo/eslint-config": "workspace:*"
     },
     "peerDependencies": {
-        "next": ">=14"
+        "next": ">=14.2.15"
     }
 }