📦 Nextjs Auth0

by Auth0

🔍 What is Nextjs Auth0?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-32702

HIGH CVSS 8.0 Jun 25, 2021

The Auth0 Next.js SDK versions 1.4.1 and lower contain a reflected cross-site scripting (XSS) vulnerability. Attackers can inject malicious JavaScript code via the 'error' query parameter during authe...

CVE-2025-67716

MEDIUM CVSS 5.7 Dec 11, 2025

The Auth0 Next.js SDK versions 4.9.0 through 4.12.1 have an input validation flaw in the returnTo parameter that allows attackers to inject malicious OAuth query parameters into authorization requests...

CVE-2025-67490

MEDIUM CVSS 5.4 Dec 10, 2025

The Auth0 Next.js SDK vulnerability allows simultaneous requests from the same client to cause improper token cache lookups, potentially leading to authentication failures or incorrect token handling....