https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:03:03.210918+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199434 EUVD-2026-199434 2026-10-07T06:03:03.259600+00:00 EUVD-2026-199434 https://cve.radiocsirt.org/vuln/fkie_cve-2024-51752 fkie_cve-2024-51752 2026-10-07T06:03:03.259637+00:00

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.13.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-5wmg-9cvh-qw25 GHSA-5wmg-9cvh-qw25 — @workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled 2026-10-07T06:03:03.259672+00:00

Affected: npm: @workos-inc/authkit-nextjs

### Impact Refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled.

### Patches Patched in [https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2](https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2)