Skip to content
Threat Feed
Subscribe

Vendor

SuperTokens

2 briefs RSS
high advisory

SuperTokens Core: Dashboard session expiry validation bypass (CVE-2026-123799)

SuperTokens Core fails to validate dashboard session expiry at the API level, relying instead on a periodic cleanup task.

SuperTokens Core
1c
high advisory

SuperTokens Core: Authentication bypass via API-key and tenant enforcement (CVE-2026-123797)

SuperTokens Core versions prior to 11.3.6, 11.4.6, and 12.0.8 are vulnerable to an authentication bypass that allows unauthenticated role management due to improper handling of tenant paths and CDI versions.

SuperTokens Core
1r 1t 1c