IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2024-11-05 20:15

MODIFIED

2024-11-06 18:17

EPSS (Prob. Exploit)

0.22%

Top 87.7%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08

> DESCRIPTION

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.4.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-v2qh-f584-6hj8 LOW

@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled

AFFECTED PACKAGES:

NPM / @workos-inc/authkit-remix

< 0.4.1

Fixed in: 0.4.1

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix

AFFECTED PACKAGES:

Unknown / Unknown

5 versions affected

ALIASES:

GHSA-v2qh-f584-6hj8

> HISTORIQUE DES MODIFICATIONS

Première apparition

05/11/2024 20:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 14:56

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui