Workos Authkit-session vulnerabilities

• workos authkit-session @workos/authkit-session: Open Redirect via state-derived redirect target CVE-2026-42565 Fix available 4.3 MediumMay 5, 2026