QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-51752

Back to search

CVE-2024-51752

Published: Nov 5, 2024

Modified: Nov 5, 2024

PUBLISHED

Description

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.13.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

VendorProductVersions

workos

authkit-nextjs

affected
< 0.13.2

Weaknesses (CWE)

CWE-532

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now