diff --git a/advisories/github-reviewed/2026/04/GHSA-xq8m-7c5p-c2r6/GHSA-xq8m-7c5p-c2r6.json b/advisories/github-reviewed/2026/04/GHSA-xq8m-7c5p-c2r6/GHSA-xq8m-7c5p-c2r6.json index fc02b1583cf9..874eef2e3874 100644 --- a/advisories/github-reviewed/2026/04/GHSA-xq8m-7c5p-c2r6/GHSA-xq8m-7c5p-c2r6.json +++ b/advisories/github-reviewed/2026/04/GHSA-xq8m-7c5p-c2r6/GHSA-xq8m-7c5p-c2r6.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-xq8m-7c5p-c2r6", - "modified": "2026-04-21T15:21:46Z", + "modified": "2026-04-21T15:21:47Z", "published": "2026-04-21T15:21:46Z", "aliases": [ "CVE-2026-40155" ], "summary": "Auth0 Next.js SDK has Improper Proxy Cache Lookup", - "details": "### Description\nIn affected versions of the Next.js SDK, simultaneous requests that trigger a nonce retry may cause the proxy cache fetcher to perform improper lookups for the token request results.\n\n### Which Projects are Affected?\nUsers are affected if they meet all of the following preconditions:\n- Applications using the auth0/nextjs-auth0 SDK, versions 4.12.0 to 4.17.0, and\n- Applications using the proxy handler /me/* and /my-org/* with DPoP enabled.\n\n\n### Affected product and versions\nAuth0/nextjs-auth0 v4.12.0 to 4.17.0\n\n### Resolution\nUpgrade Auth0/nextjs-auth0 version to v4.18.0 or greater\n\n### Acknowledgements\nOkta would like to thank Reynaldo Immanuel for their discovery and responsible disclosure.", + "details": "### Description\nIn affected versions of the Next.js SDK, simultaneous requests that trigger a nonce retry may cause the proxy cache fetcher to perform improper lookups for the token request results.\n\n### Which Projects are Affected?\nUsers are affected if they meet all of the following preconditions:\n- Applications using the auth0/nextjs-auth0 SDK, versions 4.12.0 to 4.17.1, and\n- Applications using the proxy handler /me/* and /my-org/* with DPoP enabled.\n\n\n### Affected product and versions\nAuth0/nextjs-auth0 v4.12.0 to 4.17.1\n\n### Resolution\nUpgrade Auth0/nextjs-auth0 version to v4.18.0 or greater\n\n### Acknowledgements\nOkta would like to thank Reynaldo Immanuel for their discovery and responsible disclosure.", "severity": [ { "type": "CVSS_V3", @@ -32,10 +32,7 @@ } ] } - ], - "database_specific": { - "last_known_affected_version_range": "<= 4.17.0" - } + ] } ], "references": [