@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled
- Severity:
- Low
Description
Refresh tokens are logged to the console when the disabled by default debug flag, is enabled.
Recommendation
Update the @workos-inc/authkit-remix package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.4.1
- Patched version(s): 0.4.1
References
Related Issues
- The AuthKit Remix Library renders sensitive auth data in HTML - CVE-2025-55009
- snowflake-sdk may incorrectly validate temporary credential cache file permissions - CVE-2025-24791
- @saltcorn/server arbitrary file zip read and download when downloading auto backups - Vulnerability
- lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964) - CVE-2024-47066
- Tags:
- npm
- @workos-inc/authkit-remix
Anything's wrong? Let us know Last updated on November 05, 2024