From ebd2d6c01fef586bc012da1bceb347163e357a68 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 11 Mar 2026 07:57:35 +0000
Subject: [PATCH] Upgrade next from 15.3.8 to 15.3.9 to fix HTTP request
 deserialization DoS vulnerability

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
---
 package-lock.json | 16 ++++++++--------
 package.json      |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 850e5645..13bae79c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,7 +15,7 @@
         "dotenv": "^17.3.1",
         "express": "^5.2.1",
         "imapflow": "^1.2.12",
-        "next": "15.3.8",
+        "next": "15.3.9",
         "nodemailer": "^8.0.1",
         "react": "^19.0.0",
         "react-dom": "^19.0.0"
@@ -1496,9 +1496,9 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "15.3.8",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.8.tgz",
-      "integrity": "sha512-SAfHg0g91MQVMPioeFeDjE+8UPF3j3BvHjs8ZKJAUz1BG7eMPvfCKOAgNWJ6s1MLNeP6O2InKQRTNblxPWuq+Q==",
+      "version": "15.3.9",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.9.tgz",
+      "integrity": "sha512-I7wMCjlHc85EvAebNYJCRBZ+shdrGhcIXBviWmDzGYXwTQ+WrYpfg1LBOnTK1Bn3b+ud5apesNObXKEGqi/C3g==",
       "license": "MIT"
     },
     "node_modules/@next/swc-darwin-arm64": {
@@ -5358,12 +5358,12 @@
       }
     },
     "node_modules/next": {
-      "version": "15.3.8",
-      "resolved": "https://registry.npmjs.org/next/-/next-15.3.8.tgz",
-      "integrity": "sha512-L+4c5Hlr84fuaNADZbB9+ceRX9/CzwxJ+obXIGHupboB/Q1OLbSUapFs4bO8hnS/E6zV/JDX7sG1QpKVR2bguA==",
+      "version": "15.3.9",
+      "resolved": "https://registry.npmjs.org/next/-/next-15.3.9.tgz",
+      "integrity": "sha512-bat50ogkh2esjfkbqmVocL5QunR9RGCSO2oQKFjKeDcEylIgw3JY6CMfGnzoVfXJ9SDLHI546sHmsk90D2ivwQ==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "15.3.8",
+        "@next/env": "15.3.9",
         "@swc/counter": "0.1.3",
         "@swc/helpers": "0.5.15",
         "busboy": "1.6.0",
diff --git a/package.json b/package.json
index 19d52121..ff62c756 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "dotenv": "^17.3.1",
     "express": "^5.2.1",
     "imapflow": "^1.2.12",
-    "next": "15.3.8",
+    "next": "15.3.9",
     "nodemailer": "^8.0.1",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"