An open index of dependabot pull requests across open source projects.

next-auth

Ecosystem:
npm
Package URL:
pkg:npm/next-auth
Total PRs:
2,208 Dependabot PRs
Latest PR:
6 days ago
Unique Repositories:
1,010 repositories
Unique Repos (30 days):
73 repositories
Security Advisories
NextAuthjs Email misdelivery Vulnerability
GHSA-5jpx-9hw9-2fx4 MODERATE published 7 months ago • updated about 2 months ago
### Summary NextAuth.js's email sign-in can be forced to deliver authentication emails to an attacker-controlled mailbox due to a bug in `nodemail...
Possible user mocking that bypasses basic authentication
GHSA-v64w-49xw-qq89 CVE-2023-48309 MODERATE published over 2 years ago • updated about 2 months ago
### Impact `next-auth` applications prior to version **4.24.5** that rely on the default [Middleware authorization](https://next-auth.js.org/confi...
Missing proper state, nonce and PKCE checks for OAuth authentication
GHSA-7r7x-4c4q-c4qf CVE-2023-27490 HIGH published about 3 years ago • updated 27 days ago
### Impact `next-auth` applications using OAuth provider versions before `v4.20.1` are affected. A bad actor who can spy on the victim's network o...
Improper handling of email input
GHSA-pgjx-7f9g-9463 CVE-2022-31127 HIGH published almost 4 years ago • updated 2 days ago
### Impact An attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.js.org/getting-started/rest-api#post-apiauth...
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
GHSA-p6mm-27gq-9v3p CVE-2022-31186 LOW published almost 4 years ago • updated 2 days ago
### Impact An information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows an attacker with log access privilege to ob...
Recent PRs
Bump typeorm and next-auth

moh815815/my-store #10

3.29.10 → 4.24.14 Major PR
Open 9 days ago 2 comments
moh815815
Bump xml2js and next-auth

moh815815/my-store #9

3.29.10 → 4.24.14 Major PR
Closed 9 days ago 3 comments
moh815815
Bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.31

benvoluto/qualitative #19

5.0.0-beta.30 → 5.0.0-beta.31
Open 11 days ago 2 comments
benvoluto
Bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.31

Miransas/miransas #10

5.0.0-beta.30 → 5.0.0-beta.31
Closed 14 days ago 1 comment
Miransas
Bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.31 in /web

Miransas/binboi #14

5.0.0-beta.30 → 5.0.0-beta.31
Closed 14 days ago 1 comment
Miransas
Bump next and next-auth

NeedsAdjustment/korora #22

4.22.1 → 4.24.14 Minor PR
Open 18 days ago 1 comment
NeedsAdjustment
Package Details
Name: next-auth
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/next-auth
JSON API: View JSON
Security Advisories

10

Active advisories
CRITICAL 1
HIGH 3
MODERATE 4
LOW 2
View All npm Advisories
Package Information
Description:

Authentication for Next.js

Repository: https://github.com/nextauthjs/next-auth
Homepage: https://authjs.dev
Latest Release: 4.24.11
over 1 year ago
Dependent Repos: 19,200
Dependent Packages: 304
Downloads: 5,828,252
Ranking: Top 0.207% by dependent repos Top 0.184% by downloads Top 0.2307% by dependent pkgs
PR Status
Open 1,265 (57.3%)
Merged 58 (2.6%)
Closed 635 (28.8%)
PR Types
Major 22 (1.0%)
Minor 202 (9.1%)
Patch 502 (22.7%)