Vendors / workos Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now workos records in CISA KEV No workos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js.
CVSS 4.0 HIGH 8.0· Network · No auth · No interaction · EPSS 0.00393 · Published 2025-11-21 · Fixed in 2.11.1 CWE-524
Priority LOW 36
The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00659 · Published 2024-03-29 · Fixed in 0.4.2 CWE-294
Priority LOW 31
The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00411 · Published 2025-08-09 · Fixed in 0.15.0 CWE-200
Priority LOW 31
The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00411 · Published 2025-08-09 · Fixed in 0.7.0 CWE-200
Priority LOW 27
WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication factor) when the attacker knows the user's password.
CVSS 3.1 MEDIUM 6.0· Network · Low privileges · No interaction · EPSS 0.00337 · Published 2025-02-24 · Fixed in 2025-01-07 CWE-305
Priority LOW 19
@workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00194 · Published 2026-05-11 · Fixed in 0.5.1 CWE-601
Priority LOW 11
The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix.
CVSS 4.0 LOW 2.1· Local · No auth · No interaction · EPSS 0.00217 · Published 2024-11-05 · Fixed in 0.4.1 CWE-532
Priority LOW 11
The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js.
CVSS 4.0 LOW 2.1· Local · No auth · No interaction · EPSS 0.00246 · Published 2024-11-05 · Fixed in 0.13.2 CWE-532
Open these records in search → All records by CVSS severity
0 4 2 2 0
THREATIST.IORead the docs