Skip to content
OpenAdvisories

Product · auth0

nextjs-auth0

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2025-48947

    NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies

    The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK versions 4.0.1 through 4.6.0, `__session` cookies set by auth0.middleware may be cached by CDNs due to missing Cache-Control headers. Three p…

    auth0 nextjs-auth0 @auth0/nextjs-auth0 npm
  • High 8.0
    CVE-2021-32702

    Reflected XSS from the callback handler's error query parameter

    The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before and including `1.4.1` are vulnerable to reflected XSS. An attacker can execute arbitrary code by providing an XSS payload in the `error` query par…

    auth0 nextjs-auth0 @auth0/nextjs-auth0 npm