@workos-inc/authkit-nextjs (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @workos-inc/authkit-nextjs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2025-64762 — CVSS 9.1 (critical): The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js…
• CVE-2024-51752 — CVSS 5.5 (medium): The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js…
• CVE-2024-29901 — CVSS 4.8 (medium): The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js. A user can…