Skip to content
OpenAdvisories

Vendor

workos

8 known vulnerabilities.

Products

authkit-nextjs 3 authkit-remix 2 Hosted AuthKit 1 authkit-session 1 authkit-react-router 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.0
    CVE-2025-64762

    authkit-nextjs may let session cookies be cached in CDNs

    The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In en…

    workos authkit-nextjs @workos-inc/authkit-nextjs npm
  • High 7.1
    CVE-2025-55008

    AuthKit React Router: Sensitive auth data rendered in HTML

    The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specificall…

    workos authkit-react-router @workos-inc/authkit-react-router npm
  • High 7.1
    CVE-2025-55009

    AuthKit: Sensitive auth data rendered in HTML

    The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSess…

    workos authkit-remix @workos-inc/authkit-remix npm