MEDIUM6.4npm
GHSA-2mqv-4j3r-vjvp· CVE-2021-43812Open redirect in @auth0/nextjs-auth0
Modified: 7/8/2026
package
npm/@auth0/nextjs-auth0
pkg:npm/%40auth0/nextjs-auth0
HIGH8.0npm
GHSA-954c-jjx6-cxv7· CVE-2021-32702Reflected XSS from the callback handler's error query parameter
Modified: 7/8/2026
HIGHnpm
GHSA-f3fg-mf2q-fj3f· CVE-2025-48947NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies
Modified: 6/4/2025
LOW3.7npm
GHSA-mr6f-h57v-rpj5· CVE-2025-67716Improper Validation of Query Parameters in Auth0 Next.js SDK
Modified: 12/11/2025
MEDIUMnpm
GHSA-pjr6-jx7r-j4r6· CVE-2025-46344Auth0 NextJS SDK v4 Missing Session Invalidation
Modified: 4/30/2025
MEDIUM5.4npm
GHSA-wcgj-f865-c7j7· CVE-2025-67490Improper Request Caching Lookup in the Auth0 Next.js SDK
Modified: 12/11/2025
MEDIUM5.4npm
GHSA-xq8m-7c5p-c2r6· CVE-2026-40155Auth0 Next.js SDK has Improper Proxy Cache Lookup
Modified: 4/21/2026