GHSA-mr6f-h57v-rpj5
Low · 3.7CVSS
3.7
EPSS
—
Published
Dec 10, 2025
CISA due date
—
The record
Improper Validation of Query Parameters in Auth0 Next.js SDK
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @auth0/nextjs-auth0 | 4.9.0 | 4.13.0 |
Related vulnerabilities
- CVE-2025-67716 The Auth0 Next.js SDK is a library for implementing user authentication in Next.js… Same vulnerability
- GHSA-xq8m-7c5p-c2r6 Auth0 Next.js SDK has Improper Proxy Cache Lookup Also affects @auth0/nextjs-auth0
- CVE-2026-40155 The Auth0 Next.js SDK is a library for implementing user authentication in Next.js… Also affects @auth0/nextjs-auth0
- CVE-2025-67490 The Auth0 Next.js SDK is a library for implementing user authentication in Next.js… Also affects @auth0/nextjs-auth0
- GHSA-wcgj-f865-c7j7 Improper Request Caching Lookup in the Auth0 Next.js SDK Also affects @auth0/nextjs-auth0
- CVE-2026-114729 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content… CWE-184
- CVE-2026-114728 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content… CWE-184
- CVE-2026-106445 Handlebars provides the power necessary to let users build semantic templates. CWE-184