https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:14:34.890406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263216 EUVD-2026-263216 2026-10-06T02:14:34.940494+00:00 EUVD-2026-263216 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67490 fkie_cve-2025-67490 2026-10-06T02:14:34.940531+00:00

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

 https://cve.radiocsirt.org/vuln/ghsa-wcgj-f865-c7j7 GHSA-wcgj-f865-c7j7 — Improper Request Caching Lookup in the Auth0 Next.js SDK 2026-10-06T02:14:34.940570+00:00

Affected: npm: @auth0/nextjs-auth0

### Description When using affected versions of the Next.js SDK, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results.

### Am I Affected? You are affected if you meet the following preconditions: - Applications using the auth0/nextjs-auth0 SDK with a singleton client instance, versions 4.11.0, 4.11.1, and 4.12.0.

### Affected product and versions Auth0/nextjs-auth0 v4.11.0, v4.11.1, and v4.12.0.

### Resolution Upgrade Auth0/nextjs-auth0 version to v4.11.2 or v4.12.1

### Acknowledgements Okta would like to thank Joshua Rogers (MegaManSec) for their discovery and responsible disclosure.