Malicious code in h2-test-hydrogen-remix (npm)

The package h2-test-hydrogen-remix was found to contain malicious code...

MAL-2025-22084 Malicious code in h2-test-hydrogen-remix (npm)

The package h2-test-hydrogen-remix was found to contain malicious code...

MAL-2025-32070 Malicious code in remix-oxygen (npm)

The package remix-oxygen was found to contain malicious code...

MAL-2025-36624 Malicious code in test-mlw2-wheat-remix-hunky-rival (npm)

The package test-mlw2-wheat-remix-hunky-rival was found to contain malicious code...

Malicious code in h2-test-remix-oxygen (npm)

The package h2-test-remix-oxygen was found to contain malicious code...

Malicious code in test-mlw2-wheat-remix-hunky-rival (npm)

The package test-mlw2-wheat-remix-hunky-rival was found to contain malicious code...

Malicious code in remix-oxygen (npm)

The package remix-oxygen was found to contain malicious code...

MAL-2025-28486 Malicious code in orderly-js-sdk-remix-template (npm)

The package orderly-js-sdk-remix-template was found to contain malicious code...

MAL-2025-22085 Malicious code in h2-test-remix-oxygen (npm)

The package h2-test-remix-oxygen was found to contain malicious code...

CVE-2025-55009

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

CVE-2025-55009

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

Information Exposure

Overview @workos-inc/authkit-remix is an Authentication and session helpers for using WorkOS & AuthKit with Remix Affected versions of this package are vulnerable to Information Exposure due to specifically sealedSession and accessToken, which return them from the authkitLoader function. An...

CVE-2025-55009 AuthKit: Sensitive auth data rendered in HTML

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

CVE-2025-55009

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

CVE-2025-55009 AuthKit: Sensitive auth data rendered in HTML

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

CVE-2025-55009

CVE-2025-55009 affects the AuthKit Remix package @workos-inc/authkit-remix. Versions ≤ 0.14.1 expose sensitive artifacts (sealedSession and accessToken) via the authkitLoader, causing them to be rendered into browser HTML. This creates information exposure and potential session/API access risk, a...

CVE-2025-55009 AuthKit: Sensitive auth data rendered in HTML

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

CVE-2025-55009: Exposure of Sensitive Information to an Unauthorized Actor

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

AuthKit Remix Library Information Leak Vulnerability

AuthKit Remix Library is a WorkOS open source library for authentication and session management. An information disclosure vulnerability exists in AuthKit Remix Library version 0.14.1 and earlier, which stems from exposing sensitive authentication artifacts and could lead to information disclosur...

GHSA-V3GR-W9GF-23CX The AuthKit Remix Library renders sensitive auth data in HTML

Summary Before 0.15.0, @workos-inc/authkit-remix returned sensitive authentication artifacts from the authkitLoader, specifically sealedSession and accessToken. Because these values were returned from the loader, they were embedded into the server-rendered HTML and became readable by any script...