p PatchFirst

PatchFirst · Latest vulnerabilities

@workos-inc/authkit-remix vulnerabilities

Vulnerabilities published for @workos-inc/authkit-remix in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2025-55009

    High · CVSS 7.1EPSS 0.41%Fix available

    AuthKit: Sensitive auth data rendered in HTML

    The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning them from the authkitLoader. This caused them to be rendered into the browser HTML.

    @workos-inc/authkit-remixNode.js
    • Update to 0.15.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2024-51753

    Low · CVSS 2.1EPSS 0.22%Fix available

    Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

    The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.4.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.

    @workos-inc/authkit-remixNode.js
    • Update to 0.4.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →