CVE-2025-67490
1 advisory.
npm/@auth0/nextjs-auth0 CVE-2025-67490: medium 5.4
Improper Request Caching Lookup in the Auth0 Next.js SDK
Action: Upgrade @auth0/nextjs-auth0 to 4.11.2 or later.
npm i @auth0/nextjs-auth0@4.11.2npm i @auth0/nextjs-auth0@4.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.11.0 | 4.11.2 | - |
| 4.12.0 | 4.12.1 | - |
Fixed versions
| 4.11.2 | 4.12.1 |
Sources
- osv: GHSA-wcgj-f865-c7j7
- https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-wcgj-f865-c7j7
- https://nvd.nist.gov/vuln/detail/CVE-2025-67490
- https://github.com/auth0/nextjs-auth0/commit/26cc8a7c60f4b134700912736f991a25bd6bbf0b
- https://github.com/auth0/nextjs-auth0
CVE-2025-67490 · published · modified · JSON