criticalnext-authCVE-2026-73421
Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)
Affected versions
>= 5.0.0-beta.0, <= 5.0.0-beta.31, fixed in 5.0.0-beta.32
Published 2026-07-23. Last checked 2026-11-01. Read the source advisory