nextauthjs Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by nextauthjs
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Unauthorized Request Handling Vulnerability in NextAuth.js Authentication for Next.js
CVE-2026-73418NextauthjsNext-auth7.5HIGHMissing proper state, nonce and PKCE checks for OAuth authentication in next-auth
CVE-2023-27490NextauthjsNext-auth8.1HIGHVerification requests (magic link) sent to unwanted emails
CVE-2022-35924NextauthjsNext-auth9.1CRITICALImproper handling of email input in next-auth
CVE-2022-31127NextauthjsNext-auth7.1HIGHImproper Handling of `callbackUrl` parameter in next-auth
CVE-2022-31093NextauthjsNext-auth7.5HIGH