CVE-2024-51753

LOW

authkit-remix < 0.4.1 - Sensitive Information Exposure via Debug Log

Title source: llm
STIX 2.1

Description

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.4.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.

References (3)

Core 3

Scores

CVSS v4 2.1
EPSS 0.0022
EPSS Percentile 11.8%
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-532
Status published
Products (2)
workos/authkit-remix < 0.4.1
workos-inc/authkit-remix 0 - 0.4.1npm
Published Nov 05, 2024
Tracked Since Feb 18, 2026