highnext-authCVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
Affected versions
< 3.29.5, fixed in 3.29.5>= 4.0.0, < 4.5.0, fixed in 4.5.0
Published 2022-06-21. Last checked 2026-11-01. Read the source advisory
< 3.29.5, fixed in 3.29.5>= 4.0.0, < 4.5.0, fixed in 4.5.0Published 2022-06-21. Last checked 2026-11-01. Read the source advisory