nextauthjs Next Auth Vulnerabilities
Nextauthjs Next-auth vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Anti-CSRF Vulnerability in NextAuth.js - Next.js Authentication Framework
CVE-2026-73419NextauthjsNext-auth6.8MEDIUMUnauthorized Request Handling Vulnerability in NextAuth.js Authentication for Next.js
CVE-2026-73418NextauthjsNext-auth7.5HIGHnext-auth vulnerable to possible user mocking that bypasses basic authentication
CVE-2023-48309NextauthjsNext-auth5.3MEDIUMMissing proper state, nonce and PKCE checks for OAuth authentication in next-auth
CVE-2023-27490NextauthjsNext-auth8.1HIGHNextAuth.js Upstash Adapter missing token verification
CVE-2022-39263NextauthjsNext-auth6.8MEDIUMVerification requests (magic link) sent to unwanted emails
CVE-2022-35924NextauthjsNext-auth9.1CRITICALLeakage of excessive information into log in next-auth
CVE-2022-31186NextauthjsNext-auth3.3LOWImproper handling of email input in next-auth
CVE-2022-31127NextauthjsNext-auth7.1HIGHImproper Handling of `callbackUrl` parameter in next-auth
CVE-2022-31093NextauthjsNext-auth7.5HIGHURL Redirection to Untrusted Site ('Open Redirect') in next-auth
CVE-2022-29214NextauthjsNext-auth6.1MEDIUMDefault redirect callback vulnerable to open redirects
CVE-2022-24858NextauthjsNext-auth6.1MEDIUMToken verification bug in next-auth
CVE-2021-21310NextauthjsNext-auth6.1MEDIUM