Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 2

Количество 2

nvd логотип

CVE-2026-40155

4 месяца назад

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In versions 4.12.0 through 4.17.1, simultaneous requests that trigger a nonce retry may cause the proxy cache fetcher to perform improper lookups for the token request results. Users are affected if their project uses both the vulnerable versions and the proxy handler /me/* and /my-org/* with DPoP enabled. This issue has been fixed in version 4.18.0.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-xq8m-7c5p-c2r6

4 месяца назад

Auth0 Next.js SDK has Improper Proxy Cache Lookup

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-40155

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In versions 4.12.0 through 4.17.1, simultaneous requests that trigger a nonce retry may cause the proxy cache fetcher to perform improper lookups for the token request results. Users are affected if their project uses both the vulnerable versions and the proxy handler /me/* and /my-org/* with DPoP enabled. This issue has been fixed in version 4.18.0.

CVSS3: 5.4
0%
Низкий
4 месяца назад
github логотип
GHSA-xq8m-7c5p-c2r6

Auth0 Next.js SDK has Improper Proxy Cache Lookup

CVSS3: 5.4
0%
Низкий
4 месяца назад

Уязвимостей на страницу