Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

next-auth

npm

Authentication for Next.js

View on github.com · View on npmjs.org

Security Advisories for next-auth in npm

Critical
26 days ago

Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error) GSA_kwCzR0hTQS04ZnBnLXhtM2YtNmN4M84ABfmR

npm next-auth
High
26 days ago

Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers GSA_kwCzR0hTQS14bWY4LWN2cXItcmZnas4ABfmQ

npm next-auth, @auth/core
Critical
26 days ago

Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass GSA_kwCzR0hTQS03cnFqLWo2NWYtNjh3aM4ABfmP

npm next-auth, @auth/core
Moderate
26 days ago

Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them GSA_kwCzR0hTQS14NDQ1LWYzaDItajI3Oc4ABfmO

npm next-auth, @auth/core
Moderate
10 months ago

NextAuthjs Email misdelivery Vulnerability GSA_kwCzR0hTQS01anB4LTlodzktMmZ4NM4ABN9m

npm next-auth
Moderate
over 2 years ago

Possible user mocking that bypasses basic authentication GSA_kwCzR0hTQS12NjR3LTQ5eHctcXE4Oc4AA3R1

npm next-auth
High
over 3 years ago

Missing proper state, nonce and PKCE checks for OAuth authentication GSA_kwCzR0hTQS03cjd4LTRjNHEtYzRxZs4AAyE2

npm next-auth
Potential
Moderate
almost 4 years ago

Upstash Adapter missing token verification GSA_kwCzR0hTQS00cnhyLTI3bW0tbXhxOc4AAvIm

npm @next-auth/upstash-redis-adapter
Low
about 4 years ago

next-auth before v4.10.2 and v3.29.9 leaks excessive information into log GSA_kwCzR0hTQS1wNm1tLTI3Z3EtOXYzcM4AAt2a

npm next-auth
Critical
about 4 years ago

NextAuth.js before 4.10.3 and 3.29.10 sending verification requests (magic link) to unwanted emails GSA_kwCzR0hTQS14djk3LWM2MnYtNDU4N84AAtxf

npm next-auth
High
about 4 years ago

Improper handling of email input GSA_kwCzR0hTQS1wZ2p4LTdmOWctOTQ2M84AAtHy

npm next-auth
High
about 4 years ago

Improper Handling of `callbackUrl` parameter in next-auth GSA_kwCzR0hTQS1nNWZtLWpwOXYtMjQzMs4AAs5b

npm next-auth
Moderate
about 4 years ago

URL Redirection to Untrusted Site ('Open Redirect') in next-auth GSA_kwCzR0hTQS1xMm14LWo0eDItMmg3NM4AArBA

npm next-auth
Moderate
over 4 years ago

NextAuth.js default redirect callback vulnerable to open redirects GSA_kwCzR0hTQS1mOXdnLTVmNDYtY2ptd80_pg

npm next-auth
Low
over 5 years ago

Token verification bug in next-auth MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXBnNTMtNTZjZy00bThx

npm next-auth

Filter by Severity

Moderate 6 High 4 Critical 3 Low 2