Latest nextauth.js next-auth Vulnerabilities

● CVE-2023-48309

next-auth vulnerable to possible user mocking that bypasses basic authentication

npm/next-auth<4.24.5

Nextauth.js Next-auth<4.24.5

● CVE-2023-27490

NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.1` have been found to be subject to an authenticati...

Nextauth.js Next-auth<4.20.1

● CVE-2022-39263

`@next-auth/upstash-redis-adapter` is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js. Applications that use `next-auth` Email Provider and `@next-auth/upstash-red...

Nextauth.js Next-auth<3.0.2

● CVE-2022-35924

NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in versions before `4.10.3` or `3.29.10` are affected...

Nextauth.js Next-auth<3.29.10

Nextauth.js Next-auth>=4.0.0<4.10.3

● CVE-2022-31127

NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.js.org/getting-starte...

Nextauth.js Next-auth<3.29.8

Nextauth.js Next-auth>=4.0.0<4.9.0

● CVE-2022-31093

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid `callbackUrl` qu...

Nextauth.js Next-auth>=3.0.0<3.29.5

Nextauth.js Next-auth>=4.0.0<4.5.0

● CVE-2022-29214

NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and 4.3.3, an open redirect vulnerability is present when the developer is implemen...

Nextauth.js Next-auth<3.29.3

Nextauth.js Next-auth>=4.0.0<4.3.3

● CVE-2022-24858

next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able...

Nextauth.js Next-auth>=3.0.0<3.29.2

Nextauth.js Next-auth>=4.0.0<4.3.2

● CVE-2021-21310

NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Pri...

Nextauth.js Next-auth<3.3.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.