{"action":"Upgrade @auth0/nextjs-auth0 to 1.6.2 or later.","affected":[{"fixed":"1.6.2","introduced":"0"}],"component":"@auth0/nextjs-auth0","cve_ids":["CVE-2021-43812"],"ecosystem":"npm","epss":0.00677,"exploited":false,"fixed_versions":["1.6.2"],"ghsa_id":"GHSA-2mqv-4j3r-vjvp","id":"tcs_01M5KETMEWWK2NVV8VAF6X4Y03","modified_at":"2026-07-08T06:28:49.665321049Z","published_at":"2021-12-16T18:52:21Z","references":["https://osv.dev/vulnerability/GHSA-2mqv-4j3r-vjvp","https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-2mqv-4j3r-vjvp","https://nvd.nist.gov/vuln/detail/CVE-2021-43812","https://github.com/auth0/nextjs-auth0/commit/0bbd9f8a0c93af51f607f28633b5fb18c5e48ad6","https://github.com/auth0/nextjs-auth0"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-2mqv-4j3r-vjvp","url":"https://osv.dev/vulnerability/GHSA-2mqv-4j3r-vjvp"}],"summary":"Open redirect in @auth0/nextjs-auth0"}