Workos

8 CVEs across 5 Workos products. Browse Workos vulnerabilities, severities, and proof-of-concept exploits.

Workos products with known CVEs

ProductCVEs
Authkit-Nextjs3
Authkit-Remix2
Authkit-React-Router1
Authkit-Session1
Hosted Authkit1
Workos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-42565Medium4.32026-05-11@workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vulnerability exists in AuthService.h…
CVE-2025-64762Critical9.12025-11-21The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs ve…
CVE-2025-55009High7.12025-08-09The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and b…
CVE-2025-55008High7.12025-08-09The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1…
CVE-2025-23017Medium6.02025-02-24WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication factor) when the attacker knows the user…
CVE-2024-517532024-11-05The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions ref…
CVE-2024-51752Medium5.52024-11-05The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions…
CVE-2024-29901Medium4.82024-03-29The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js. A user can reuse an expired ses…