483 matches found
AuthKit Next.js Library 安全漏洞
AuthKit Next.js Library is a WorkOS open source AuthKit library for Next.js. A security vulnerability exists in AuthKit Next.js Library version 2.11.0 and earlier, which stems from an unapplied anti-caching header that could lead to session token disclosure...
Use of Cache Containing Sensitive Information
Overview @workos-inc/authkit-nextjs is an Authentication and session helpers for using WorkOS & AuthKit with Next.js Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to missing anti-caching headers on authenticated responses. An attacker can ga...
authkit-nextjs may let session cookies be cached in CDNs
In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications...
GHSA-P8PF-44FF-93GF authkit-nextjs may let session cookies be cached in CDNs
In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications...
EUVD-2025-177616
Malicious code in nextjs-quark-supercluster-nebula npm...
EUVD-2025-176461
Malicious code in sedna-nextjs-baryon-ceres npm...
EUVD-2025-177618
Malicious code in nextjs-html-webpack-plugin-express-gemini npm...
Malicious code in nextjs-sagitta-backend-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d30433018a5273b06b2934b8e3c126a9eacec0a1c317401dac6dd8848fadecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177638
Malicious code in neuromorphic-nextjs-phenomic-telesto npm...
Malicious code in solarnebula-nextjs-start-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a158f05aded8cc14a93cdd7ddcd71a02ef799b562af59a0981fea88e286fb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177619
Malicious code in nextjs-google-transport-markdownlint npm...
EUVD-2025-175943
Malicious code in thuban-charon-uninstall-nextjs npm...
EUVD-2025-177611
Malicious code in nextjs-tachyon-apollo-cosmos npm...
EUVD-2025-176291
Malicious code in solarnebula-browserify-lightyear-nextjs npm...
EUVD-2025-178816
Malicious code in fusion-nextjs-iota-materialize npm...
EUVD-2025-178867
Malicious code in forever-webpack-whitedwarf-nextjs npm...
EUVD-2025-176546
Malicious code in sails-europa-nextjs-version npm...
Malicious code in nextjs-weywot-bioinformatics-selenium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21c7bbb3589182010dd1d9bcfb88841beb2fc6f908229b0a78e48f24a75fb9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...