@workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled
- Severity:
- Low
Description
Refresh tokens are logged to the console when the disabled by default debug flag, is enabled.
Recommendation
Update the @workos-inc/authkit-nextjs package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.13.2
- Patched version(s): 0.13.2
References
Related Issues
- @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user - CVE-2025-61668
- Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID) - CVE-2024-56334
- Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS - CVE-2024-43788
- @workos-inc/authkit-nextjs session replay vulnerability - CVE-2024-29901
- Tags:
- npm
- @workos-inc/authkit-nextjs
Anything's wrong? Let us know Last updated on November 05, 2024