Products: 3
    Vulnerabilities: 6
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-42565

    @workos/authkit-session: Open Redirect via state-derived redirect target

    Last Modified: May 12, 2026
    Published: May 11, 2026

    CVE-2025-64762

    authkit-nextjs may let session cookies be cached in CDNs

    Last Modified: Dec 11, 2025
    Published: Nov 21, 2025

    CVE-2025-55008

    AuthKit React Router: Sensitive auth data rendered in HTML

    Last Modified: Apr 15, 2026
    Published: Aug 09, 2025

    CVE-2025-55009

    AuthKit: Sensitive auth data rendered in HTML

    Last Modified: Apr 15, 2026
    Published: Aug 09, 2025

    CVE-2024-51752

    Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs

    Last Modified: Dec 11, 2025
    Published: Nov 05, 2024
    Items Per Page