Login Request a demo
NE
Product
nextjs-auth0
by auth0 · last CVE Oct 13, 2026
8
CVEs
0
On KEV
7.7
Max CVSS
1
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 1Medium 7Low 0
Severity
All severities8Critical0High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add nextjs-auth0 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107369
6.1
0%
Oct 13
Improper Validation of Post-Login Redirect URL in nextjs-auth0
Affected: before 4.32.0
CVE-2021-43812
6.1
1%
Dec 16
Open redirect in nextjs-auth0
Affected: < 1.6.2
CVE-2021-32702
6.1
1%
Jun 25
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications
Affected: before 1.4.2
CVE-2025-67716
5.7
0%
Dec 11
Auth0 Next.js SDK has Improper Validation of Query Parameters
Affected: >= 4.9.0, < 4.13.0
CVE-2026-40155
5.4
0%
Apr 17
Auth0 Next.js SDK has Improper Proxy Cache Lookup
Affected: >= 4.12.0, < 4.18.0
CVE-2025-67490
5.4
0%
Dec 10
Auth0 Next.js SDK has Improper Request Caching Lookup
Affected: >= 4.12.0, < 4.12.1; >= 4.11.0, < 4.11.2
CVE-2025-46344
4.9
0%
Apr 29
Auth0 NextJS SDK v4 Missing Session Invalidation
Affected: >= 4.0.1, < 4.5.1
Showing 7