What’s Vulnerable › Products

auth0 nextjs-auth0 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your auth0 nextjs-auth0 version is affected

Latest auth0 nextjs-auth0 vulnerabilities

• CVE-2026-107369 — Improper Validation of Post-Login Redirect URL in nextjs-auth0 (CVSS 6.1)
• CVE-2026-40155 — Auth0 Next.js SDK has Improper Proxy Cache Lookup (CVSS 5.4)
• CVE-2025-67716 — Auth0 Next.js SDK has Improper Validation of Query Parameters (CVSS 5.7)
• CVE-2025-67490 — Auth0 Next.js SDK has Improper Request Caching Lookup (CVSS 5.4)
• CVE-2025-48947 — NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies (CVSS 7.7)
• CVE-2025-46344 — Auth0 NextJS SDK v4 Missing Session Invalidation (CVSS 4.9)
• CVE-2021-43812 — Open redirect in nextjs-auth0 (CVSS 6.1)
• CVE-2021-32702 — Reflected XSS from the callback handler's error query parameter (CVSS 6.1)