Vendor

    WorkOS

    8 known vulnerabilities in products by WorkOS, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WorkOS
    CriticalCVE-2025-64762

    authkit-nextjs may let session cookies be cached in CDNs

    		9.1
    HighCVE-2025-55008

    AuthKit React Router: Sensitive auth data rendered in HTML

    		7.1
    HighCVE-2025-55009

    AuthKit: Sensitive auth data rendered in HTML

    		7.1
    HighCVE-2024-29901

    @workos-inc/authkit-nextjs session replay vulnerability

    		4.8
    MediumCVE-2025-23017

    WorkOS Hosted AuthKit: Authentication Bypass by Primary Weakness

    		6.0
    MediumCVE-2026-42565

    @workos/authkit-session: Open Redirect via state-derived redirect target

    		4.3
    MediumCVE-2024-51752

    Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs

    		5.5
    LowCVE-2024-51753

    Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

    		—

    Products

    Products by WorkOS
    Authkit-nextjs30