Vulnerabilities > Nextauth JS > Next Auth > 3.14.0

DATE CVE VULNERABILITY TITLE RISK
2023-11-20 CVE-2023-48309 Incorrect Authorization vulnerability in Nextauth.Js Next-Auth
NextAuth.js provides authentication for Next.js.
network
low complexity
nextauth-js CWE-863
5.3
2023-03-09 CVE-2023-27490 Session Fixation vulnerability in Nextauth.Js Next-Auth
NextAuth.js is an open source authentication solution for Next.js applications.
network
low complexity
nextauth-js CWE-384
8.8
2022-07-06 CVE-2022-31127 Cross-site Scripting vulnerability in Nextauth.Js Next-Auth
NextAuth.js is a complete open source authentication solution for Next.js applications.
4.3
2022-06-27 CVE-2022-31093 Improper Check for Unusual or Exceptional Conditions vulnerability in Nextauth.Js Next-Auth
NextAuth.js is a complete open source authentication solution for Next.js applications.
network
low complexity
nextauth-js CWE-754
5.0