p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de @workos-inc/authkit-remix

Vulnerabilidades publicadas para @workos-inc/authkit-remix en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2

  1. CVE-2025-55009

    Alta · CVSS 7.1EPSS 0,41%Corrección disponible

    AuthKit: Sensitive auth data rendered in HTML

    The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning them from the authkitLoader. This caused them to be rendered into the browser HTML.

    • Actualiza a 0.15.0
    Publicación Actualización
  2. CVE-2024-51753

    Baja · CVSS 2.1EPSS 0,22%Corrección disponible

    Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

    The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.4.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.

    • Actualiza a 0.4.1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →