CVE record · 1 source
CVE-2026-123804
CVSS 6.8SuperTokens Core is an open source authentication server.
- Vendor
- Supertokens
- Product
- supertokens-core
- CVSS v3.1
- 6.8 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weakness
- CWE-362, CWE-613
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SuperTokens Core is an open source authentication server.
SuperTokens Core is an open source authentication server. From 7.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, createNewSession can resolve a primary user before unlinkAccounts detaches a…