[Snyk] Security upgrade next from 15.3.0 to 15.3.6

[m1981]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Arbitrary Code Injection SNYK-JS-NEXT-14173355	893
	Improper Verification of Cryptographic Signature SNYK-JS-PLAYWRIGHTCORE-13553173	514

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection

---

Important

Upgrade next from 15.3.0 to 15.3.6 in package.json to fix security vulnerabilities.

• Security Upgrade:
  • Upgrade next from 15.3.0 to 15.3.6 in package.json to fix vulnerabilities.
  • Addresses Arbitrary Code Injection (SNYK-JS-NEXT-14173355) and Improper Verification of Cryptographic Signature (SNYK-JS-PLAYWRIGHTCORE-13553173).

^{This description was created by for 37824db. You can customize this summary. It will automatically update as commits are pushed.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
mychat	Error			Dec 3, 2025 10:00pm

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to 37824db in 42 seconds. Click for details.

• Reviewed 13 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 1 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. package.json:88

• Draft comment:
  Upgrade 'next' from 15.3.0 to 15.3.6 to patch a critical vulnerability. Verify that this patch update is fully backward compatible and that the Playwright vulnerability (if transitively affected) is also resolved.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the PR author to verify backward compatibility and check for a specific vulnerability resolution. This falls under asking the author to ensure behavior and compatibility, which is against the rules.

Workflow ID: wflow_LY8cd0iZEneDuBE4

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}