Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-29901

@workos-inc/authkit-nextjs session replay vulnerability

Description

The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js. A user can reuse an expired session by controlling the `x-workos-session` header. The vulnerability is patched in v0.4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

workos authkit-nextjs

  • < 0.4.2affected

References