Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-67490
5.4
MEDIUMCVSS v3
Published
December 10, 2025
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.
auth0/nextjs-auth0
GitHubNext.js SDK for signing in with Auth0
GitHubNext.js SDK for signing in with Auth0= 4.11.0, = 4.11.1, = 4.12.0, >= 4.11.0, < 4.11.2, >= 4.12.0, < 4.12.1NVD
@auth0/nextjs-auth0
NPMAuth0 Next.js SDK
NPMAuth0 Next.js SDK= 4.11.0, = 4.11.1, = 4.12.0, >= 4.11.0, < 4.11.2, >= 4.12.0, < 4.12.1NVD