Skip to content
OpenAdvisories

Product · supabase

auth-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2025-48370

    auth-js Vulnerable to Insecure Path Routing from Malformed User Input

    auth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.70.0, the library functions getUserById, deleteUser, updateUserById, listFactors and deleteFactor did not require the user supplied values to be valid UUIDs. This could lead to …

    supabase auth-js @supabase/auth-js npm