- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 high, 1 medium, 1 low
- Weekly downloads
- 1.4M
- Dependents
- 2
- Registry
- npm
Advisories 3
- CVE-2025-64762High 8.0
authkit-nextjs may let session cookies be cached in CDNs
Affected: fixed in 2.11.1.
- CVE-2024-51752Low 2.1
Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs
Affected: fixed in 0.13.2.
- CVE-2024-29901Medium 4.8
@workos-inc/authkit-nextjs session replay vulnerability
Affected: fixed in 0.4.2.