Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS12MnFoLWY1ODQtNmhqOM4ABA_S

@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled

Impact

Refresh tokens are logged to the console when the disabled by default debug flag, is enabled.

Patches

Patched in https://github.com/workos/authkit-remix/releases/tag/v0.4.1

Permalink: https://github.com/advisories/GHSA-v2qh-f584-6hj8
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12MnFoLWY1ODQtNmhqOM4ABA_S
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: about 2 months ago
Updated: about 2 months ago

EPSS Percentage: 0.00045
EPSS Percentile: 0.1735

Identifiers: GHSA-v2qh-f584-6hj8, CVE-2024-51753
References:

• https://github.com/workos/authkit-remix/security/advisories/GHSA-v2qh-f584-6hj8
• https://github.com/workos/authkit-remix/commit/32d5bcd54c795c1e2a3204f8e3977ab9ad57ec06
• https://github.com/workos/authkit-remix/releases/tag/v0.4.1
• https://nvd.nist.gov/vuln/detail/CVE-2024-51753
• https://github.com/advisories/GHSA-v2qh-f584-6hj8

Repository: https://github.com/workos/authkit-remix
Blast Radius: 1.0

Affected Packages