npm/@supabase/auth-js CVE-2025-48370: low, EPSS 0.90%
auth-js Vulnerable to Insecure Path Routing from Malformed User Input
Action: Upgrade @supabase/auth-js to 2.70.0 or later.
npm i @supabase/auth-js@2.70.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.70.0 | - |
Fixed versions
| 2.70.0 |
Sources
- osv: GHSA-8r88-6cj9-9fh5
- https://github.com/supabase/auth-js/security/advisories/GHSA-8r88-6cj9-9fh5
- https://nvd.nist.gov/vuln/detail/CVE-2025-48370
- https://github.com/supabase/auth-js/pull/1063
- https://github.com/supabase/auth-js/commit/1bcb76e479e51cd9bca2d7732d0bf3199e07a693
- https://github.com/supabase/auth-js
CVE-2025-48370 · published · modified · JSON