Improper Verification of Source of a Communication Channel

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim's...

NPM: Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them

NPM: Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them vulnerability discovered by ? in WordPress Npm next-auth versions = 4.24.14...