https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:42:11.044255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-55009 CVE-2025-55009 — AuthKit: Sensitive auth data rendered in HTML 2026-10-07T22:42:11.060286+00:00

Affected: workos authkit-remix

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning them from the authkitLoader. This caused them to be rendered into the browser HTML.