GHSA-xq8m-7c5p-c2r6
Medium · 5.4CVSS
5.4
EPSS
—
Published
Apr 21, 2026
CISA due date
—
The record
Auth0 Next.js SDK has Improper Proxy Cache Lookup
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @auth0/nextjs-auth0 | 4.12.0 | 4.18.0 |
Related vulnerabilities
- CVE-2026-40155 The Auth0 Next.js SDK is a library for implementing user authentication in Next.js… Same vulnerability
- CVE-2025-67716 The Auth0 Next.js SDK is a library for implementing user authentication in Next.js… Also affects @auth0/nextjs-auth0
- CVE-2025-67490 The Auth0 Next.js SDK is a library for implementing user authentication in Next.js… Also affects @auth0/nextjs-auth0
- GHSA-mr6f-h57v-rpj5 Improper Validation of Query Parameters in Auth0 Next.js SDK Also affects @auth0/nextjs-auth0
- GHSA-wcgj-f865-c7j7 Improper Request Caching Lookup in the Auth0 Next.js SDK Also affects @auth0/nextjs-auth0
- CVE-2026-114641 Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and… CWE-362
- CVE-2026-109279 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when… CWE-362
- CVE-2026-97032 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder… CWE-362