Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
@auth records in CISA KEVNo @auth vulnerabilities are listed in CISA KEV.
Priority MEDIUM 48
NextAuth.js provides authentication for Next.js.
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00725 · Published 2026-08-13 · Fixed in 4.24.15, 5.0.0-beta.32 +1 CWE-180
Priority MEDIUM 40
NextAuth.js provides authentication for Next.js.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00877 · Published 2026-08-12 · Fixed in 0.41.3, 5.0.0-beta.32 +1 CWE-20
Priority LOW 32
NextAuth.js provides authentication for Next.js.
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.00249 · Published 2026-08-12 · Fixed in 4.24.15, 5.0.0-beta.32 +1 CWE-345
Open these records in search →