Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AuthKit React Router: Sensitive auth data rendered in HTML
Vulnerability Description
The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by returning them from the authkitLoader. This caused them to be rendered into the browser HTML. This issue is fixed in version 0.7.0.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Vulnerability Type
信息暴露
Vulnerability Title
AuthKit React Router Library 信息泄露漏洞
Vulnerability Description
AuthKit React Router Library是WorkOS开源的一个在React Router 7中使用的身份验证和会话助手。 AuthKit React Router Library 0.6.1及之前版本存在信息泄露漏洞，该漏洞源于暴露了敏感认证工件，可能导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A