Filters
Software
npm/next-authnext-auth vulnerable to possible user mocking that bypasses basic authentication
5.3
First published (updated )
Nextauth.js Next-authMissing proper state, nonce and PKCE checks for OAuth authentication in next-auth
8.8
First published (updated )
Nextauth.js Next-authNextAuth.js Upstash Adapter missing token verification
8.1
First published (updated )
Nextauth.js Next-authVerification requests (magic link) sent to unwanted emails
9.1
First published (updated )
Nextauth.js Next-authImproper handling of email input in next-auth
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextauth.js Next-authImproper Handling of `callbackUrl` parameter in next-auth
7.5
First published (updated )
Nextauth.js Next-authURL Redirection to Untrusted Site ('Open Redirect') in next-auth
6.1
First published (updated )
Nextauth.js Next-authDefault redirect callback vulnerable to open redirects
6.1
First published (updated )
Nextauth.js Next-authToken verification bug in next-auth
6.1
First published (updated )