{"action":"Upgrade @workos-inc/authkit-nextjs to 0.13.2 or later.","affected":[{"fixed":"0.13.2","introduced":"0"}],"component":"@workos-inc/authkit-nextjs","cve_ids":["CVE-2024-51752"],"ecosystem":"npm","epss":0.00246,"exploited":false,"fixed_versions":["0.13.2"],"ghsa_id":"GHSA-5wmg-9cvh-qw25","id":"tcs_01M5KF4YNZAS4VDSQW0NXASWAZ","modified_at":"2024-11-05T21:37:24Z","published_at":"2024-11-05T17:34:23Z","references":["https://osv.dev/vulnerability/GHSA-5wmg-9cvh-qw25","https://github.com/workos/authkit-nextjs/security/advisories/GHSA-5wmg-9cvh-qw25","https://nvd.nist.gov/vuln/detail/CVE-2024-51752","https://github.com/workos/authkit-nextjs/commit/15a332632f7560b03cc6d8cc8da24fd2ac931da7","https://github.com/workos/authkit-nextjs","https://github.com/workos/authkit-nextjs/releases/tag/v0.13.2"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-5wmg-9cvh-qw25","url":"https://osv.dev/vulnerability/GHSA-5wmg-9cvh-qw25"},{"source":"nvd","source_id":"CVE-2024-51752","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51752"}],"summary":"@workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled"}