workos vulnerabilities
8 published CVEs name workos among the affected products.
- 8Published CVEs8 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-42565
@workos/authkit-session: Open Redirect via state-derived redirect target
workos · authkit-session
Medium4.3 - CVE-2025-64762
authkit-nextjs may let session cookies be cached in CDNs
workos · authkit-nextjs
High8.0 - CVE-2025-55008
AuthKit React Router: Sensitive auth data rendered in HTML
workos · authkit-react-router
High7.1 - CVE-2025-55009
AuthKit: Sensitive auth data rendered in HTML
workos · authkit-remix
High7.1 - CVE-2025-23017
WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication factor) when the attacker knows the…
WorkOS · Hosted AuthKit
Medium6.0 - CVE-2024-51752
Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs
workos · authkit-nextjs
Low2.1 - CVE-2024-51753
Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix
workos · authkit-remix
Low2.1 - CVE-2024-29901
@workos-inc/authkit-nextjs session replay vulnerability
workos · authkit-nextjs
Medium4.8