Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: auth0 Component: Nextjs-auth0 Clear all filters
TI-2026-28970 CVE-2026-40155 · GHSA-xq8m-7c5p-c2r6

Auth0 Next.js SDK has Improper Proxy Cache Lookup

Priority LOW 24

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00214 Published 2026-04-17 Fixed in 4.18.0 CWE-362
TI-2025-41249 CVE-2025-67490 · GHSA-wcgj-f865-c7j7

Auth0 Next.js SDK has Improper Request Caching Lookup

Priority LOW 24

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00202 Published 2025-12-10 Fixed in 4.12.1, 4.11.2 CWE-863
TI-2021-19618 CVE-2021-43812 · GHSA-2mqv-4j3r-vjvp

Open redirect in nextjs-auth0

Priority LOW 30

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00677 Published 2021-12-16 Fixed in 1.6.2 CWE-601