npm/@workos-inc/authkit-react-router CVE-2025-55008: high 7.1, EPSS 0.39%
The AuthKit React Router Library rendered sensitive auth data in HTML
Action: Upgrade @workos-inc/authkit-react-router to 0.7.0 or later.
npm i @workos-inc/authkit-react-router@0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-vqvc-9q8x-vmq6
- https://github.com/workos/authkit-react-router/security/advisories/GHSA-vqvc-9q8x-vmq6
- https://nvd.nist.gov/vuln/detail/CVE-2025-55008
- https://github.com/workos/authkit-react-router/commit/607caac658784962bab76e227f9c5820d0b9a9e5
- https://github.com/workos/authkit-react-router
- https://github.com/workos/authkit-react-router/releases/tag/v0.7.0
CVE-2025-55008 · published · modified · JSON