Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

next-auth — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in next-auth, with AI-generated Chinese analysis, references, and POCs.

Vendor: nextauthjs

CVE IDTitleCVSSSeverityPaused
CVE-2023-48309 next-auth vulnerable to possible user mocking that bypasses basic authentication CWE-285 5.3 Medium2023-11-20
CVE-2023-27490 Missing proper state, nonce and PKCE checks for OAuth authentication in next-auth CWE-384 8.1 High2023-03-09
CVE-2022-39263 NextAuth.js Upstash Adapter missing token verification CWE-287 6.8 Medium2022-09-28
CVE-2022-35924 Verification requests (magic link) sent to unwanted emails CWE-20 9.1 Critical2022-08-02
CVE-2022-31186 Leakage of excessive information into log in next-auth CWE-532 3.3 Low2022-08-01
CVE-2022-31127 Improper handling of email input in next-auth CWE-79 7.1 High2022-07-06
CVE-2022-31093 Improper Handling of `callbackUrl` parameter in next-auth CWE-754 7.5 High2022-06-27
CVE-2022-29214 URL Redirection to Untrusted Site ('Open Redirect') in next-auth CWE-601 6.1 Medium2022-05-20
CVE-2022-24858 Default redirect callback vulnerable to open redirects CWE-290 6.1 Medium2022-04-19
CVE-2021-21310 Token verification bug in next-auth CWE-290 6.1 Medium2021-02-11

All 10 known CVE vulnerabilities affecting next-auth with full Chinese analysis, references, and POCs where available.