Description
The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js.
A user can reuse an expired session by controlling the `x-workos-session` header. The vulnerability is patched in v0.4.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| workos | authkit-nextjs | < 0.4.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @workos-inc/authkit-nextjs | < 0.4.2 | 0.4.2 | GHSA-35w3-6qhc-474v |