CVE-2025-64762
1 advisory.
npm/@workos-inc/authkit-nextjs CVE-2025-64762: high
authkit-nextjs may let session cookies be cached in CDNs
Action: Upgrade @workos-inc/authkit-nextjs to 2.11.1 or later.
npm i @workos-inc/authkit-nextjs@2.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.11.1 | - |
Fixed versions
| 2.11.1 |
Sources
- osv: GHSA-p8pf-44ff-93gf
- https://github.com/workos/authkit-nextjs/security/advisories/GHSA-p8pf-44ff-93gf
- https://nvd.nist.gov/vuln/detail/CVE-2025-64762
- https://github.com/workos/authkit-nextjs/commit/94cf438124993abb0e7c19dac64c3cb5724a15ea
- https://github.com/workos/authkit-nextjs
- https://github.com/workos/authkit-nextjs/releases/tag/v2.11.1
CVE-2025-64762 · published · modified · JSON