[Snyk] Security upgrade next from 14.2.5 to 14.2.35

[kidunot89]

Snyk has created this PR to fix 12 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• packages/nextjs-example/package.json
• packages/nextjs-example/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Improper Authorization SNYK-JS-NEXT-9508709	876
	Deserialization of Untrusted Data SNYK-JS-NEXT-14400636	796
	Server-side Request Forgery (SSRF) SNYK-JS-NEXT-12299318	776
	Acceptance of Extraneous Untrusted Data With Trusted Data SNYK-JS-NEXT-8025427	756
	Race Condition SNYK-JS-NEXT-10176058	636
	Uncontrolled Recursion SNYK-JS-NEXT-8186172	624
	Missing Authorization SNYK-JS-NEXT-8520073	624
	Allocation of Resources Without Limits or Throttling SNYK-JS-NEXT-8602067	559
	Improper Input Validation SNYK-JS-NANOID-8492085	529
	Use of Cache Containing Sensitive Information SNYK-JS-NEXT-12301496	529
	Missing Origin Validation in WebSockets SNYK-JS-NEXT-10259370	329
	Missing Source Correlation of Multiple Independent Data SNYK-JS-NEXT-12265451	329

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation
🦉 Race Condition
🦉 Server-side Request Forgery (SSRF)
🦉 More lessons are available in Snyk Learn

[kidunot89]

This is a patch version upgrade for next. The changes between version 14.2.5 and 14.2.35 consist of bug fixes, security patches, and performance improvements. There are no documented breaking API changes.

Key Changes:

• Security Fixes: Includes patches for several vulnerabilities, including a race condition in the Pages Router (patched in 14.2.24) and issues related to React Server Components.
• Performance Improvements: This version range continues the improvements from the 14.2 release, such as reduced build memory usage, CSS optimizations, and better tree-shaking.
• Bug Fixes: Addresses various bugs, including issues with parallel and intercepting routes.

No developer action is required for this upgrade as it is backward compatible.

Source: Next.js 14.2 Release Notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.