Known vulnerabilities in NextAuth.js next-auth 4.0.3
4.24.10
4.24.9
4.24.8
4.24.7
4.24.6
4.24.5
4.24.4
4.24.3
4.24.2
4.24.1
4.24.0
4.23.2
4.23.1
4.23.0
4.22.5
4.22.4
4.22.3
4.22.2
4.22.1
4.22.0
4.21.1
4.21.0
4.20.1
4.20.0
4.19.2
4.19.1
4.19.0
4.18.10
4.18.9
4.18.8
4.18.7
4.18.6
4.18.5
4.18.4
4.18.3
4.18.2
4.18.1
4.18.0
4.17.0
4.16.4
4.16.3
4.16.2
4.16.1
4.16.0
4.15.2
4.15.1
4.15.0
4.14.0
4.13.0
4.12.3
4.12.2
4.12.1
4.12.0
4.11.0
4.10.3
4.10.2
4.10.1
4.10.0
4.9.0
4.8.0
4.7.0
4.6.1
4.6.0
4.5.0
4.4.0
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.1
4.2.0
4.1.2
4.1.1
4.1.0
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
3.29.10
3.29.9
3.29.8
3.29.7
3.29.6
3.29.5
3.29.4
3.29.3
3.29.1
3.29.0
3.28.0
3.27.3
3.27.2
3.27.1
3.27.0
3.26.1
3.26.0
3.25.0
3.24.1
3.24.0
3.23.3
3.23.2
3.23.1
3.23.0
3.22.0
3.21.1
3.21.0
3.20.1
3.20.0
3.19.8
3.19.7
3.19.6
3.19.5
3.19.4
3.19.3
3.19.2
3.19.1
3.19.0
3.18.2
3.18.1
3.18.0
3.17.2
3.17.1
3.17.0
3.16.1
3.16.0
3.15.13
3.15.12
3.15.11
3.15.10
3.15.9
3.15.8
3.15.7
3.15.6
3.15.5
3.15.4
3.15.1
3.15.0
3.14.8
3.14.7
3.14.6
3.14.5
3.14.4
3.14.3
3.14.2
3.14.1
3.14.0
3.13.3
3.13.2
3.13.1
3.13.0
3.12.0
3.11.2
3.11.1
3.11.0
3.10.1
3.10.0
3.9.0
3.8.0
3.7.1
3.7.0
3.6.1
3.6.0
3.5.1
3.5.0
3.4.2
4.0.0
3.4.1
3.4.0
3.3.1
3.3.0
3.2.1
3.2.0
3.1.0
3.0.1
3.0.0
2.2.0
2.1.0
2.0.1
2.0.0
1.12.1
1.12.0
1.11.0
1.10.0
1.9.1
1.9.0
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.3
1.7.2
1.7.1
1.7.0
1.6.0
1.5.1
1.5.0
1.4.1
1.4.0
1.3.0
1.2.1
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.3
1.1.2
1.1.1
1.1.0
1.0.0
Security bulletins (7)
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB2023112076: Improper authentication in NextAuth.js | Low | 20.11.2023 | |
| SB2023030953: CSRF in NextAuth.js | Medium | 09.03.2023 | |
| SB2022081067: Improper authorization in NextAuth.js | Low | 10.08.2022 | |
| SB2022080963: Information disclosure in NextAuth.js | Low | 09.08.2022 | |
| SB2022071433: XSS in NextAuth.js | Medium | 14.07.2022 | |
| SB2022060728: Open redirect in NextAuth.js OAuth 1 provider | Low | 07.06.2022 | |
| SB2022042924: Open redirect in NextAuth.js | Low | 29.04.2022 |