Auth0 nextjs-auth0

• CVE-2026-107369 Medium 6.1 Improper Validation of Post-Login Redirect URL in nextjs-auth0 0.2%
• CVE-2026-40155 Medium 5.4 Auth0 Next.js SDK has Improper Proxy Cache Lookup 0.2%
• CVE-2025-67716 Medium 5.7 Auth0 Next.js SDK has Improper Validation of Query Parameters 0.3%
• CVE-2025-67490 Medium 5.4 Auth0 Next.js SDK has Improper Request Caching Lookup 0.2%
• CVE-2025-48947 High 7.7 NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies 0.4%
• CVE-2025-46344 Medium 4.9 Auth0 NextJS SDK v4 Missing Session Invalidation 0.4%
• CVE-2021-43812 Medium 6.4 Open redirect in nextjs-auth0 0.7%
• CVE-2021-32702 High 8.0 Reflected XSS from the callback handler's error query parameter 1.4%