NE
Product
nextjs-auth0
8
CVEs
0
On KEV
7.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 7Low 0
Watch
Add nextjs-auth0 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107369 | 6.1 | Oct 13 | Improper Validation of Post-Login Redirect URL in nextjs-auth0 Affected: before 4.32.0 |
| CVE-2021-43812 | 6.1 | Dec 16 | Open redirect in nextjs-auth0 Affected: < 1.6.2 |
| CVE-2021-32702 | 6.1 | Jun 25 | Reflected XSS from the callback handler's error query parameter Affected: < 1.4.2 |
| CVE-2025-67716 | 5.7 | Dec 11 | Auth0 Next.js SDK has Improper Validation of Query Parameters Affected: >= 4.9.0, < 4.13.0 |
| CVE-2026-40155 | 5.4 | Apr 17 | Auth0 Next.js SDK has Improper Proxy Cache Lookup Affected: >= 4.12.0, < 4.18.0 |
| CVE-2025-67490 | 5.4 | Dec 10 | Auth0 Next.js SDK has Improper Request Caching Lookup Affected: >= 4.12.0, < 4.12.1; >= 4.11.0, < 4.11.2 |
| CVE-2025-46344 | 4.9 | Apr 29 | Auth0 NextJS SDK v4 Missing Session Invalidation Affected: >= 4.0.1, < 4.5.1 |
Showing 7