CVE record · 1 source
CVE-2026-123799
CVSS 7.4SuperTokens Core is an open source authentication server.
- Vendor
- Supertokens
- Product
- supertokens-core
- CVSS v3.1
- 7.4 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weakness
- CWE-613
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SuperTokens Core is an open source authentication server.
SuperTokens Core is an open source authentication server. From 11.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, and 12.1.2, Dashboard.isValidUserSession treats any stored session row as valid without comparing…