Nextauth.js Next-Auth
9 CVEs affecting Nextauth.js Next-Auth. Latest disclosed: 2023-11-20. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35924 | Critical | 9.1 | 2022-08-02 | NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in versions… |
CVE-2023-27490 | High | 8.1 | 2023-03-09 | NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.1` have be… |
CVE-2022-31093 | High | 7.5 | 2022-06-27 | NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using Nex… |
CVE-2022-31127 | High | 7.1 | 2022-07-06 | NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail [signin endpoint… |
CVE-2022-39263 | Medium | 6.8 | 2022-09-28 | `@next-auth/upstash-redis-adapter` is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js. Applications that use `next-auth` E… |
CVE-2022-29214 | Medium | 6.1 | 2022-05-21 | NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and 4.3.3, an open redirect vulnerability… |
CVE-2022-24858 | Medium | 6.1 | 2022-04-19 | next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patc… |
CVE-2021-21310 | Medium | 6.1 | 2021-02-11 | NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vul… |
CVE-2023-48309 | Medium | 5.3 | 2023-11-20 | NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affecte… |