MAL-2025-2409 Malicious code in remix-run-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remix-run-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in remix-kl-c646

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in remix-kl-c646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a85da0593ba62361a1b877e3000ed361c7f4fee4943ba4472a9f97648f7236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11226 Malicious code in remix-kl-c646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a85da0593ba62361a1b877e3000ed361c7f4fee4943ba4472a9f97648f7236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Exposure

@workos-inc/authkit-remix is vulnerable to Information Exposure. The vulnerability is due to the debug flag being enabled, which allows an attacker to view refresh tokens logged to the console...

CVE-2024-51753

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.4.1. A...

CVE-2024-51753

CVE-2024-51753 affects the AuthKit Remix library (WorkOS/AuthKit with Remix). The vulnerability is an information exposure where refresh tokens are logged to the console when the debug flag is enabled. The issue has been patched in version 0.4.1; upgrading is advised. Affected behavior is limited...

CVE-2024-51753

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default "debug" flag, is enabled. This issue has been patched in version 0.4.1...

CVE-2024-51753 Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.4.1. A...

CVE-2024-51753 Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.4.1. A...

@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled

Impact Refresh tokens are logged to the console when the disabled by default debug flag, is enabled. Patches Patched in https://github.com/workos/authkit-remix/releases/tag/v0.4.1...

GHSA-V2QH-F584-6HJ8 @workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled

Impact Refresh tokens are logged to the console when the disabled by default debug flag, is enabled. Patches Patched in https://github.com/workos/authkit-remix/releases/tag/v0.4.1...

CVE-2024-51753: Insertion of Sensitive Information into Log File

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default debug flag, is enabled. This issue has been patched in version 0.4.1. A...

PT-2024-34884 · Authkit +1 · Authkit +1

Name of the Vulnerable Software and Affected Versions: AuthKit library for Remix versions prior to 0.4.1 Description: The issue concerns the logging of refresh tokens to the console when the debug flag is enabled. This flag is disabled by default. There are no known workarounds for this issue. Al...

AuthKit Remix Library log information leakage vulnerability

AuthKit Remix Library is a WorkOS open source library for authentication and session management. A logging information disclosure vulnerability exists in the AuthKit Remix Library, where a refresh token is logged to the console when the "debug" flag is enabled, which is disabled by default...

@conform-to/react (>=0.1.0, <=0.9.1), @kentcdodds/workshop-app (>=1.41.0, <=1.46.7) +1 more potentially affected by CVE-2024-32866 via @conform-to/dom (>=0.1.0, <=0.9.1)

@conform-to/dom NPM version =0.1.0, =0.1.0, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: GHSA-624G-8QJG-8QXF...

@kentcdodds/workshop-app (>=1.41.0, <=1.46.7), remix-server-kit (>=3.0.0-beta1, <=3.0.0-beta4) potentially affected by CVE-2024-32866 via @conform-to/zod (>=0.5.1, <=0.7.4)

@conform-to/zod NPM version =0.5.1, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...

@conform-to/react (>=0.1.0, <=0.9.1), @kentcdodds/workshop-app (>=1.41.0, <=1.46.7) +1 more potentially affected by CVE-2024-32866 via @conform-to/dom (>=0.1.0, <=0.9.1)

@conform-to/dom NPM version =0.1.0, =0.1.0, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...

@kentcdodds/workshop-app (>=1.41.0, <=1.46.7), remix-server-kit (>=3.0.0-beta1, <=3.0.0-beta4) potentially affected by CVE-2024-32866 via @conform-to/zod (>=0.5.1, <=0.7.4)

@conform-to/zod NPM version =0.5.1, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: GHSA-624G-8QJG-8QXF...