auth0 nextjs-auth0 vulnerabilities
8 published CVEs name auth0 nextjs-auth0 among the affected products.
- 8Published CVEs8 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107369
Improper Validation of Post-Login Redirect URL in nextjs-auth0
Auth0 · nextjs-auth0
Medium6.1 - CVE-2026-40155
Auth0 Next.js SDK has Improper Proxy Cache Lookup
auth0 · nextjs-auth0
Medium5.4 - CVE-2025-67716
Auth0 Next.js SDK has Improper Validation of Query Parameters
auth0 · nextjs-auth0
Medium5.7 - CVE-2025-67490
Auth0 Next.js SDK has Improper Request Caching Lookup
auth0 · nextjs-auth0
Medium5.4 - CVE-2025-48947
NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies
auth0 · nextjs-auth0
High7.7 - CVE-2025-46344
Auth0 NextJS SDK v4 Missing Session Invalidation
auth0 · nextjs-auth0
Medium4.9 - CVE-2021-43812
Open redirect in nextjs-auth0
auth0 · nextjs-auth0
Medium6.4 - CVE-2021-32702
Reflected XSS from the callback handler's error query parameter
auth0 · nextjs-auth0
High8.0