highnext-authCVE-2026-73418
Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers
Affected versions
>= 5.0.0-beta.0, <= 5.0.0-beta.31, fixed in 5.0.0-beta.32>= 4.0.6, <= 4.24.14, fixed in 4.24.15
Published 2026-07-23. Last checked 2026-11-01. Read the source advisory