CVE-2026-42565
1 advisory.
npm/@workos/authkit-session CVE-2026-42565: medium 4.3
@workos/authkit-session has an Open Redirect via state-derived redirect target
Action: Upgrade @workos/authkit-session to 0.5.1 or later.
npm i @workos/authkit-session@0.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.1 | - |
Fixed versions
| 0.5.1 |
Sources
- osv: GHSA-vvvv-983w-r7pv
- https://github.com/workos/authkit-session/security/advisories/GHSA-vvvv-983w-r7pv
- https://nvd.nist.gov/vuln/detail/CVE-2026-42565
- https://github.com/workos/authkit-session/commit/f56e1d6214a93160759e5677b7a3d772b244db39
- https://github.com/workos/authkit-session
- https://github.com/workos/authkit-session/releases/tag/v0.5.1
CVE-2026-42565 · published · modified · JSON