CVE-2025-48947
1 advisory.
npm/@auth0/nextjs-auth0 CVE-2025-48947: high, EPSS 0.43%
NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies
Action: Upgrade @auth0/nextjs-auth0 to 4.6.1 or later.
npm i @auth0/nextjs-auth0@4.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.1 | 4.6.1 | - |
Fixed versions
| 4.6.1 |
Sources
- osv: GHSA-f3fg-mf2q-fj3f
- https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-f3fg-mf2q-fj3f
- https://nvd.nist.gov/vuln/detail/CVE-2025-48947
- https://github.com/auth0/nextjs-auth0/commit/12a62ca596db3b0827b39a4b865b882423e7cb1e
- https://github.com/auth0/nextjs-auth0
CVE-2025-48947 · published · modified · JSON