{"action":"Upgrade @workos-inc/authkit-remix to 0.15.0 or later.","affected":[{"fixed":"0.15.0","introduced":"0"}],"component":"@workos-inc/authkit-remix","cve_ids":["CVE-2025-55009"],"ecosystem":"npm","epss":0.00388,"exploited":false,"fixed_versions":["0.15.0"],"ghsa_id":"GHSA-v3gr-w9gf-23cx","id":"tcs_01M5KGAJ7R0JMSM3SWDVF6TG40","modified_at":"2025-09-25T22:56:19Z","published_at":"2025-08-08T17:08:46Z","references":["https://osv.dev/vulnerability/GHSA-v3gr-w9gf-23cx","https://github.com/workos/authkit-remix/security/advisories/GHSA-v3gr-w9gf-23cx","https://nvd.nist.gov/vuln/detail/CVE-2025-55009","https://github.com/workos/authkit-remix/commit/20102afc74bf3dd5150a975a098067fb406b90b6","https://github.com/workos/authkit-remix","https://github.com/workos/authkit-remix/releases/tag/v0.15.0","https://osv.dev/vulnerability/CVE-2025-55009"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-v3gr-w9gf-23cx","url":"https://osv.dev/vulnerability/GHSA-v3gr-w9gf-23cx"}],"summary":"The AuthKit Remix Library renders sensitive auth data in HTML"}