CVE-2024-29901
The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js.
A user can reuse an expired session by controlling the x-workos-session header. The vulnerability is patched in v0.4.2.
| Software | From | Fixed in |
|---|---|---|
@workos-inc / authkit-nextjs
|
- | 0.4.2 |
| workos / authkit-nextjs | - | 0.4.2 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime