Cpe:2.3:a:supertokens:supertokens_core:*:*:*:*:*:*:*:*

SuperTokens Core versions prior to 11.3.6, 11.4.6, and 12.0.8 are vulnerable to an authentication bypass that allows unauthenticated role management due to improper handling of tenant paths and CDI versions.