{"action":"Upgrade next-auth to 4.24.12 or later.","affected":[{"fixed":"4.24.12","introduced":"0"},{"fixed":"5.0.0-beta.30","introduced":"5.0.0-beta.0"}],"component":"next-auth","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.24.12","5.0.0-beta.30"],"ghsa_id":"GHSA-5jpx-9hw9-2fx4","id":"tcs_01M5KF4293NYE3M4N9V6EA0FCW","modified_at":"2026-09-10T03:50:29.281362473Z","published_at":"2025-10-29T10:43:57Z","references":["https://osv.dev/vulnerability/GHSA-5jpx-9hw9-2fx4","https://github.com/nextauthjs/next-auth/security/advisories/GHSA-5jpx-9hw9-2fx4","https://github.com/nextauthjs/next-auth/commit/82efcf81f218aae43683f8dd2f7c260ef69b3ece","https://github.com/nextauthjs/next-auth/commit/8f3b2c7af0fe08973a12f616517c3ec85a5cd172","https://github.com/nextauthjs/next-auth"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5jpx-9hw9-2fx4","url":"https://osv.dev/vulnerability/GHSA-5jpx-9hw9-2fx4"}],"summary":"NextAuthjs Email misdelivery Vulnerability"}