CVE-2025-67490 | BDVDB-2026-305355 Detail

Description#

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-12-10Record published in the CVE List.
2. Version 22025-12-11Most recent update recorded in the CVE List.