Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Next Auth MEDIUM 5.3
CVE-2023-48309

NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization a…

Fix: 4.24.5+
Fix from $1,600 2023-11-20
Next Auth HIGH 8.8
CVE-2023-27490

NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.…

Fix: 4.20.1+
Fix from $1,950 2023-03-09
Next Auth HIGH 8.1
CVE-2022-39263

`@next-auth/upstash-redis-adapter` is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js. Applications that use `ne…

Fix: 3.0.2+
Fix from $1,950 2022-09-28
Next Auth CRITICAL 9.1
CVE-2022-35924

NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in…

Fix: 3.29.10 / 4.10.3+
Fix from $2,300 2022-08-02
Next Auth MEDIUM 6.1
CVE-2022-31127

NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail [signi…

Fix: 3.29.8 / 4.9.0+
Fix from $1,600 2022-07-06
Next Auth HIGH 7.5
CVE-2022-31093

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app…

Fix: 3.29.5 / 4.5.0+
Fix from $1,950 2022-06-27
Next Auth MEDIUM 6.1
CVE-2022-29214

NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and 4.3.3, an open redirect vuln…

Fix: 3.29.3 / 4.3.3+
Fix from $1,600 2022-05-21
Next Auth MEDIUM 6.1
CVE-2022-24858

next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2…

Fix: 3.29.2 / 4.3.2+
Fix from $1,600 2022-04-19
Next Auth MEDIUM 5.9
CVE-2021-21310

NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verifi…

Fix: 3.3.0+
Fix from $1,600 2021-02-11