# What changed in supertokens-node

> 5 changes in supertokens-node 24 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/npm/supertokens-node/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## supertokens-node 24

### Security

- Fixed an open redirect in SAML login. (24.0.2) — [release notes](https://github.com/supertokens/supertokens-node/releases/tag/v24.0.2)

### Fixes and other changes

- Handles OAuth redirects when using the Next.js App Router. (24.0.3) — [release notes](https://github.com/supertokens/supertokens-node/releases/tag/v24.0.3)
- Fixes sign-in failures for counter-incrementing authenticators such as Windows Hello by avoiding verification of the assertion against the core twice. (24.0.3) — [release notes](https://github.com/supertokens/supertokens-node/releases/tag/v24.0.3)
- Handles null form field values instead of throwing. (24.0.2) — [release notes](https://github.com/supertokens/supertokens-node/releases/tag/v24.0.2)
- Fixes the return types of exported SAML functions, improving the types exposed to developers. (24.0.1) — [release notes](https://github.com/supertokens/supertokens-node/releases/tag/v24.0.1)