LOW
GHSA-5wmg-9cvh-qw25
@workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled
Quick fix
GHSA-5wmg-9cvh-qw25 — @workos-inc/authkit-nextjs: upgrade to the fixed version with the command below.
npm install @workos-inc/authkit-nextjs@0.13.2Details
### Impact Refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled.
### Patches Patched in [https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2](https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2)
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/@workos-inc/authkit-nextjs
Introduced in:
0Fixed in: 0.13.2Fix
npm install @workos-inc/authkit-nextjs@0.13.2References
- https://github.com/workos/authkit-nextjs/security/advisories/GHSA-5wmg-9cvh-qw25[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2024-51752[ADVISORY]
- https://github.com/workos/authkit-nextjs/commit/15a332632f7560b03cc6d8cc8da24fd2ac931da7[WEB]
- https://github.com/workos/authkit-nextjs[PACKAGE]
- https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2[WEB]