Auth0 Next.js SDK has Improper Validation of Query Parameters

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-67716 · Microsoft / collected KEV context

EUVD-2025-202629

GHSA-mr6f-h57v-rpj5

cve-program · CVE-2025-67716

• https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5
• https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c

euvd · EUVD-2025-202629

• https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5
• https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c

nvd · CVE-2025-67716

• https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c
• https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5

osv · GHSA-mr6f-h57v-rpj5

• https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5
• https://nvd.nist.gov/vuln/detail/CVE-2025-67716
• https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c
• https://github.com/auth0/nextjs-auth0

No related operational record is retained in the current change model.