漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Auth0 NextJS SDK v4 Missing Session Invalidation
Vulnerability Description
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke `.setExpirationTime` when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While the session cookie may expire or be cleared, the JWE remains valid. This issue has been patched in version 4.5.1.
CVSS Information
N/A
Vulnerability Type
不充分的会话过期机制
Vulnerability Title
nextjs-auth0 代码问题漏洞
Vulnerability Description
nextjs-auth0是Auth0开源的一个Next.js SDK，用于使用Auth0登录。 nextjs-auth0 4.0.1至4.5.1之前版本存在代码问题漏洞，该漏洞源于生成JWE令牌时未设置过期时间。
CVSS Information
N/A
Vulnerability Type
N/A