What’s Vulnerable › Products

workos authkit-nextjs vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your workos authkit-nextjs version is affected

Latest workos authkit-nextjs vulnerabilities

• CVE-2025-64762 — authkit-nextjs may let session cookies be cached in CDNs (CVSS 9.1)
• CVE-2024-51752 — Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs (CVSS 5.5)
• CVE-2024-29901 — @workos-inc/authkit-nextjs session replay vulnerability (CVSS 8.1)