CVE-2026-40155
1 advisory.
npm/@auth0/nextjs-auth0 CVE-2026-40155: medium 5.4
Auth0 Next.js SDK has Improper Proxy Cache Lookup
Action: Upgrade @auth0/nextjs-auth0 to 4.18.0 or later.
npm i @auth0/nextjs-auth0@4.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.12.0 | 4.18.0 | - |
Fixed versions
| 4.18.0 |
Sources
- osv: GHSA-xq8m-7c5p-c2r6
- https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-xq8m-7c5p-c2r6
- https://nvd.nist.gov/vuln/detail/CVE-2026-40155
- https://github.com/auth0/nextjs-auth0/commit/98c36dc306970c2230ea1a32efef431d29b99978
- https://github.com/auth0/nextjs-auth0
- https://github.com/auth0/nextjs-auth0/releases/tag/v4.18.0
CVE-2026-40155 · published · modified · JSON