CVE-2025-67716
1 advisory.
npm/@auth0/nextjs-auth0 CVE-2025-67716: low 3.7, EPSS 0.26%
Improper Validation of Query Parameters in Auth0 Next.js SDK
Action: Upgrade @auth0/nextjs-auth0 to 4.13.0 or later.
npm i @auth0/nextjs-auth0@4.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.9.0 | 4.13.0 | - |
Fixed versions
| 4.13.0 |
Sources
- osv: GHSA-mr6f-h57v-rpj5
- https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5
- https://nvd.nist.gov/vuln/detail/CVE-2025-67716
- https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c
- https://github.com/auth0/nextjs-auth0
CVE-2025-67716 · published · modified · JSON