Vulnerabilities > Nextauth JS

DATE CVE VULNERABILITY TITLE RISK
2023-11-20 CVE-2023-48309 Unspecified vulnerability in Nextauth.Js Next-Auth
NextAuth.js provides authentication for Next.js.
network
low complexity
nextauth-js
5.3
2023-03-09 CVE-2023-27490 Unspecified vulnerability in Nextauth.Js Next-Auth
NextAuth.js is an open source authentication solution for Next.js applications.
network
low complexity
nextauth-js
8.8
2022-09-28 CVE-2022-39263 Unspecified vulnerability in Nextauth.Js Next-Auth
`@next-auth/upstash-redis-adapter` is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js.
network
high complexity
nextauth-js
8.1
2022-08-02 CVE-2022-35924 Incorrect Authorization vulnerability in Nextauth.Js Next-Auth
NextAuth.js is a complete open source authentication solution for Next.js applications.
network
low complexity
nextauth-js CWE-863
critical
9.1
2022-07-06 CVE-2022-31127 Unspecified vulnerability in Nextauth.Js Next-Auth
NextAuth.js is a complete open source authentication solution for Next.js applications.
network
low complexity
nextauth-js
6.1
2022-06-27 CVE-2022-31093 Unspecified vulnerability in Nextauth.Js Next-Auth
NextAuth.js is a complete open source authentication solution for Next.js applications.
network
low complexity
nextauth-js
7.5
2022-05-21 CVE-2022-29214 Unspecified vulnerability in Nextauth.Js Next-Auth
NextAuth.js (next-auth) is am open source authentication solution for Next.js applications.
network
low complexity
nextauth-js
6.1
2022-04-19 CVE-2022-24858 Open Redirect vulnerability in Nextauth.Js Next-Auth
next-auth v3 users before version 3.29.2 are impacted.
network
low complexity
nextauth-js CWE-601
6.1
2021-02-11 CVE-2021-21310 Unspecified vulnerability in Nextauth.Js Next-Auth
NextAuth.js (next-auth) is am open source authentication solution for Next.js applications.
network
high complexity
nextauth-js
5.9