workos/authkit-remix

workos/authkit-remix

Releases24

Frequency3 weeks 2 days

Last Release 7 months ago

Stars27

Authentication and session helpers for using WorkOS & AuthKit with Remix

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-55009 ↗	Aug 9, 2025Saturday, 9 August 2025, 03:15	7.1 HIGH	—
The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning them from the authkitLoader. This caused them to be rendered into the browser HTML.
CVE-2024-51753 ↗	Nov 5, 2024Tuesday, 5 November 2024, 20:15	—	—
The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.4.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.