Skip to main content

Vendor/product archive

auth0 / nextjs-auth0 CVEs

Beta · best-effort

5 CVEs tagged to auth0 / nextjs-auth00 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2026-40155

Published Apr 17, 2026

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In versions 4.12.0 through 4.17.1, simultaneous requests that trigger a nonce retr…

CVSS 5.4 · Medium
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort

CVE-2025-67716

Published Dec 11, 2025

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions 4.9.0 through 4.12.1 contain an input-validation flaw in the returnTo par…

CVSS 5.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-67490

Published Dec 10, 2025

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-43812

Published Dec 16, 2021

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before 1.6.2 do not filter out certain returnTo parameter values from the…

CVSS 6.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-32702

Published Jun 25, 2021

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before and including `1.4.1` are vulnerable to reflected XSS. An attacker…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort
Showing 1-5 of 5 CVEsPage 1 of 1