CVE-2026-73418 | nextauthjs next-auth JWT /core/jwt getToken bearer input validation

A vulnerability was found in nextauthjs next-auth. It has been rated as problematic. This vulnerability affects the function getToken of the file /core/jwt of the component JWT. The manipulation of the argument bearer leads to improper input validation. This vulnerability is traded as CVE-2026-73418. It is possible to initiate the attack remotely.... Weiterlesen