CVE-2025-67490 | auth0 nextjs-auth0 up to 4.11.1/4.12.0 TokenRequestCache authorization (GHSA-wcgj-f865-c7j7)

A vulnerability described as problematic has been identified in auth0 nextjs-auth0 up to 4.11.1/4.12.0. This affects the function TokenRequestCache. Such manipulation leads to incorrect authorization.

This vulnerability is documented as CVE-2025-67490. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More