Skip to content

CVE record · 1 source

CVE-2026-123797

CVSS 7.5

SuperTokens Core is an open source authentication server.

Vendor: Supertokens
Product: supertokens-core
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-288
Exposure class: Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

42

CVE NVD 1h ago

SuperTokens Core is an open source authentication server.

SuperTokens Core is an open source authentication server. Prior to 11.3.6, 11.4.6, and 12.0.8, app-specific management requests using an unknown tenant path and an older supported cdi-version can bypass API-key and public-tenant…

CVSS 7.5 Fix available CVE-2026-123797 Supertokens