Detections
Analytics
SCA: security update for next-auth (GHSA-8fpg-xm3f-6cx3)
high Tenable Self-Hosted Container Security Plugin ID 445217
Description
Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)Solution
Update the next-auth library and its related packages to version 5.0.0-beta.32 or later.See Also
Plugin Details
Severity: High
ID: 445217
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 7/23/2026
Updated: 7/23/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/23/2026
Vulnerability Publication Date: 7/23/2026