{"action":"Upgrade @workos-inc/authkit-nextjs to 0.4.2 or later.","affected":[{"fixed":"0.4.2","introduced":"0"}],"component":"@workos-inc/authkit-nextjs","cve_ids":["CVE-2024-29901"],"ecosystem":"npm","epss":0.00659,"exploited":false,"fixed_versions":["0.4.2"],"ghsa_id":"GHSA-35w3-6qhc-474v","id":"tcs_01M5KEW44J6520GSTETJD07ZHC","modified_at":"2026-09-10T03:50:09.989203126Z","published_at":"2024-03-29T20:16:00Z","references":["https://osv.dev/vulnerability/GHSA-35w3-6qhc-474v","https://github.com/workos/authkit-nextjs/security/advisories/GHSA-35w3-6qhc-474v","https://nvd.nist.gov/vuln/detail/CVE-2024-29901","https://github.com/workos/authkit-nextjs/commit/6c3f4f3179d66cbb15de3962792083ff3b244a01","https://github.com/workos/authkit-nextjs","https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-35w3-6qhc-474v","url":"https://osv.dev/vulnerability/GHSA-35w3-6qhc-474v"}],"summary":"@workos-inc/authkit-nextjs session replay vulnerability"}