Browse CVEs

MEDIUM 5.3 CVE-2023-48309 NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization a… Next Auth 4.24.5+ Fix from $1,6002023-11-20 HIGH 8.8 CVE-2023-27490 NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.… Next Auth 4.20.1+ Fix from $1,9502023-03-09 HIGH 8.1 CVE-2022-39263 `@next-auth/upstash-redis-adapter` is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js. Applications that use `ne… Next Auth 3.0.2+ Fix from $1,9502022-09-28 CRITICAL 9.1 CVE-2022-35924 NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in… Next Auth 3.29.10 / 4.10.3+ Fix from $2,3002022-08-02 MEDIUM 6.1 CVE-2022-31127 NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail [signi… Next Auth 3.29.8 / 4.9.0+ Fix from $1,6002022-07-06 HIGH 7.5 CVE-2022-31093 NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app… Next Auth 3.29.5 / 4.5.0+ Fix from $1,9502022-06-27 MEDIUM 6.1 CVE-2022-29214 NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and 4.3.3, an open redirect vuln… Next Auth 3.29.3 / 4.3.3+ Fix from $1,6002022-05-21 MEDIUM 6.1 CVE-2022-24858 next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2… Next Auth 3.29.2 / 4.3.2+ Fix from $1,6002022-04-19 MEDIUM 5.9 CVE-2021-21310 NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verifi… Next Auth 3.3.0+ Fix from $1,6002021-02-11