Package impact
npm / @auth0/nextjs-auth0
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-40155 | medium | 5.4 | 5.4 | 1mo ago | Auth0 Next.js SDK has Improper Proxy Cache Lookup | |||
| CVE-2025-67716 | unknown | — | — | 6mo ago | Improper Validation of Query Parameters in Auth0 Next.js SDK | |||
| CVE-2025-67490 | unknown | — | — | 6mo ago | Improper Request Caching Lookup in the Auth0 Next.js SDK | |||
| CVE-2025-48947 | unknown | — | — | 1y ago | NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies | |||
| CVE-2025-46344 | unknown | — | — | 1y ago | Auth0 NextJS SDK v4 Missing Session Invalidation | |||
| CVE-2021-43812 | unknown | — | — | 5y ago | Open redirect in @auth0/nextjs-auth0 | |||
| CVE-2021-32702 | unknown | — | — | 5y ago | Reflected XSS from the callback handler's error query parameter |