Skip to content
OpenAdvisories

Vendor

supertokens

8 known vulnerabilities.

Products

supertokens-core 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-123804

    SuperTokens Core: A session created concurrently with account unlink survives the unlink

    SuperTokens Core is an open source authentication server. From 7.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, createNewSession can resolve a primary user before unlinkAccounts detaches a login method and then insert t…

    supertokens supertokens-core