An open index of dependabot pull requests across open source projects.

next-auth

Ecosystem:
npm
Package URL:
pkg:npm/next-auth
Total PRs:
2,209 Dependabot PRs
Latest PR:
6 days ago
Unique Repositories:
1,011 repositories
Unique Repos (30 days):
62 repositories
Security Advisories
NextAuthjs Email misdelivery Vulnerability
GHSA-5jpx-9hw9-2fx4 MODERATE published 7 months ago • updated about 2 months ago
### Summary NextAuth.js's email sign-in can be forced to deliver authentication emails to an attacker-controlled mailbox due to a bug in `nodemail...
Possible user mocking that bypasses basic authentication
GHSA-v64w-49xw-qq89 CVE-2023-48309 MODERATE published over 2 years ago • updated about 2 months ago
### Impact `next-auth` applications prior to version **4.24.5** that rely on the default [Middleware authorization](https://next-auth.js.org/confi...
Missing proper state, nonce and PKCE checks for OAuth authentication
GHSA-7r7x-4c4q-c4qf CVE-2023-27490 HIGH published about 3 years ago • updated 27 days ago
### Impact `next-auth` applications using OAuth provider versions before `v4.20.1` are affected. A bad actor who can spy on the victim's network o...
Improper handling of email input
GHSA-pgjx-7f9g-9463 CVE-2022-31127 HIGH published almost 4 years ago • updated 3 days ago
### Impact An attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.js.org/getting-started/rest-api#post-apiauth...
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
GHSA-p6mm-27gq-9v3p CVE-2022-31186 LOW published almost 4 years ago • updated 3 days ago
### Impact An information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows an attacker with log access privilege to ob...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: next-auth
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/next-auth
JSON API: View JSON
Security Advisories

10

Active advisories
CRITICAL 1
HIGH 3
MODERATE 4
LOW 2
View All npm Advisories
Package Information
Description:

Authentication for Next.js

Repository: https://github.com/nextauthjs/next-auth
Homepage: https://authjs.dev
Latest Release: 4.24.11
over 1 year ago
Dependent Repos: 19,200
Dependent Packages: 304
Downloads: 5,828,252
Ranking: Top 0.207% by dependent repos Top 0.184% by downloads Top 0.2307% by dependent pkgs
PR Status
Open 1,265 (57.3%)
Merged 58 (2.6%)
Closed 636 (28.8%)
PR Types
Major 22 (1.0%)
Minor 202 (9.1%)
Patch 502 (22.7%)