CVE-2025-48370

Medium

Advisory

Published 27 May 2025In the index since 6 Sept 2026

auth-js Vulnerable to Insecure Path Routing from Malformed User Input

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
@supabase/auth-jsnpm	2.64.2, 2.65.0	2.70.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

supabasetokens-studio

1 of the 14 container images this version deploys carry CVE-2025-48370.

Container image	Digest	Package	Fixed in
supabase/studio :20241021-9f9b083	26d8070c55e9	@supabase/auth-js@2.64.2	2.70.0

23,123

n8njanip81-helm-charts

1 of the 1 container images this version deploys carry CVE-2025-48370.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.86.0	8b39ed5a2de9	@supabase/auth-js@2.65.0	2.70.0

5,826

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
n8nio/n8n :1.86.0	8b39ed5a2de9	@supabase/auth-js@2.65.0	2.70.0	1
supabase/studio :20241021-9f9b083	26d8070c55e9	@supabase/auth-js@2.64.2	2.70.0	1