Headline
GHSA-35w3-6qhc-474v: @workos-inc/authkit-nextjs session replay vulnerability
Impact
A user can reuse an expired session by controlling the x-workos-session header.
Patches
Patched in https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2
@workos-inc/authkit-nextjs session replay vulnerability
Moderate severity GitHub Reviewed Published Mar 28, 2024 in workos/authkit-nextjs • Updated Mar 29, 2024