supermemory/apps/web
Aniruddha Adak 403338ab43 fix(deps): bump next to ^16.3.3 in web, patches GHSA-p293-qw3h-jr36
GHSA-p293-qw3h-jr36 (CVE-2026-75604, critical): unauthenticated RCE on Windows-hosted Next.js servers. apps/web was on ^16.0.11 (affected: >=16.0 <16.3.3). bun.lock regenerated (resolves next 16.3.4). Follows up #1655, which covered chatapp, sdk-playground and memory-graph-playground but missed web.
2026-09-14 22:41:28 +05:30
..
app chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
public chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
.env.example chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
.gitignore sentry sourcemaps 2025-08-23 09:55:40 -07:00
biome.json feat: mobile responsive, lint formats, toast, render issue fix (#688) 2026-01-21 03:11:53 +00:00
console-origin.ts chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
middleware.ts chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
next.config.ts chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
open-next.config.ts feat: mobile responsive, lint formats, toast, render issue fix (#688) 2026-01-21 03:11:53 +00:00
package.json fix(deps): bump next to ^16.3.3 in web, patches GHSA-p293-qw3h-jr36 2026-09-14 22:41:28 +05:30
README.md chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
tsconfig.json fix 2026-02-09 22:07:09 -08:00
wrangler.jsonc feat: mobile responsive, lint formats, toast, render issue fix (#688) 2026-01-21 03:11:53 +00:00

@repo/web

Serves app.supermemory.ai. Every request is forwarded to the console: plugin and OAuth paths get an immediate redirect with the query string intact, and everything else shows a short notice before moving on.

Set NEXT_PUBLIC_CONSOLE_URL to point at a different console origin during local development.