It seems that version 12.0.1 is showing a lot of warnings and some high severity vulnerabilities

What version of Next.js are you using?

12.0.1

What version of Node.js are you using?

16.11.1

What browser are you using?

Chrome

What operating system are you using?

macOS

How are you deploying your application?

next start, next export

Describe the Bug

Hi guys, It seems that version 12.0.1 is showing a lot of warnings, as you can see here, and 17 high severity vulnerabilities

Expected Behavior

Same as 12.0.0

To Reproduce

▲  rm -rf package-lock.json node_module
▲  npm i next@12.0.1
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
npm WARN Found: react@17.0.2
npm WARN node_modules/react
npm WARN   react@"^17.0.2" from the root project
npm WARN   99 more (@grupoboticario/flora-react, ...)
npm WARN
npm WARN Could not resolve dependency:
npm WARN peer react@"0.0.0-experimental-3c4c1c470-20211021" from react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
npm WARN node_modules/react-server-dom-webpack
npm WARN   react-server-dom-webpack@"0.0.0-experimental-3c4c1c470-20211021" from next@12.0.1
npm WARN   node_modules/next
npm WARN
npm WARN Conflicting peer dependency: react@0.0.0-experimental-3c4c1c470-20211021
npm WARN node_modules/react
npm WARN   peer react@"0.0.0-experimental-3c4c1c470-20211021" from react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
npm WARN   node_modules/react-server-dom-webpack
npm WARN     react-server-dom-webpack@"0.0.0-experimental-3c4c1c470-20211021" from next@12.0.1
npm WARN     node_modules/next
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
npm WARN Found: react-dom@17.0.2
npm WARN node_modules/react-dom
npm WARN   react-dom@"^17.0.2" from the root project
npm WARN   12 more (@radix-ui/react-announce, @radix-ui/react-dialog, ...)
npm WARN
npm WARN Could not resolve dependency:
npm WARN peer react-dom@"0.0.0-experimental-3c4c1c470-20211021" from react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
npm WARN node_modules/react-server-dom-webpack
npm WARN   react-server-dom-webpack@"0.0.0-experimental-3c4c1c470-20211021" from next@12.0.1
npm WARN   node_modules/next
npm WARN
npm WARN Conflicting peer dependency: react-dom@0.0.0-experimental-3c4c1c470-20211021
npm WARN node_modules/react-dom
npm WARN   peer react-dom@"0.0.0-experimental-3c4c1c470-20211021" from react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
npm WARN   node_modules/react-server-dom-webpack
npm WARN     react-server-dom-webpack@"0.0.0-experimental-3c4c1c470-20211021" from next@12.0.1
npm WARN     node_modules/next
npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated fsevents@1.2.13: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
npm WARN deprecated chokidar@2.1.8: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
npm WARN deprecated querystring@0.2.0: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.

> template-nextjs@0.0.1 prepare
> husky install

husky - Git hooks installed

added 292 packages, changed 6 packages, and audited 1486 packages in 24s

123 packages are looking for funding
  run `npm fund` for details

17 high severity vulnerabilities

To address all issues, run:
  npm audit fix

Run `npm audit` for details.

▲  npm ls webpack
template-nextjs@0.0.1 /Users/franklinjavier/Projects/github/template-nextjs
└─┬ next@12.0.1
  ├─┬ @next/react-dev-overlay@12.0.1
  │ └─┬ webpack@4.46.0
  │   └─┬ terser-webpack-plugin@1.4.5
  │     └── webpack@4.46.0 deduped
  ├─┬ @next/react-refresh-utils@12.0.1
  │ └── webpack@4.46.0 deduped
  └─┬ react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021
    └── webpack@4.46.0 deduped

---

12.0.0

▲  rm -rf package-lock.json node_module
▲  npm i next@12.0.0

> template-nextjs@0.0.1 prepare
> husky install

husky - Git hooks installed

removed 292 packages, changed 6 packages, and audited 1194 packages in 8s

122 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

[rtritto]

Fixed on #30505. @franklinjavier you can try with a canary version (>= 12.0.2-canary.4) of next.js. So this issue can be closed.

[JonShort]

Seems to be caused by the new dependency on react-server-dom-webpack@0.0.0-experimental-3c4c1c470-20211021, since that brings in webpack 4.x.x