p PatchFirst

CVE-2025-67490

CVE-2025-67490 · Auth0 Next.js SDK has Improper Request Caching Lookup

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

CVSS 5.4 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • nextjs-auth0

    Versions
    • >= 4.12.0, < 4.12.1: Affected
    • >= 4.11.0, < 4.11.2: Affected

    No fix published

  • @auth0/nextjs-auth0 npm

    Affected ranges
    • SEMVER: ≥ 4.11.0, < 4.11.2

    Update to 4.11.2

  • @auth0/nextjs-auth0 npm

    Affected ranges
    • SEMVER: ≥ 4.12.0, < 4.12.1

    Update to 4.12.1

Original sources

Check your server →