Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: workos Component: Authkit-nextjs Clear all filters
TI-2025-40100 CVE-2025-64762 · GHSA-p8pf-44ff-93gf

authkit-nextjs may let session cookies be cached in CDNs

Priority MEDIUM 43

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js.

CVSS 4.0HIGH 8.0 Network No auth No interaction EPSS 0.00393 Published 2025-11-21 Fixed in 2.11.1 CWE-524
TI-2024-19668 CVE-2024-29901 · GHSA-35w3-6qhc-474v

@workos-inc/authkit-nextjs session replay vulnerability

Priority LOW 36

The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00659 Published 2024-03-29 Fixed in 0.4.2 CWE-294