[Snyk] Upgrade @auth0/nextjs-auth0 from 1.3.0 to 1.4.0

[snyk-bot]

Snyk has created this PR to upgrade @auth0/nextjs-auth0 from 1.3.0 to 1.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released a month ago, on 2021-06-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	375/1000 Why? CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @auth0/nextjs-auth0

• 1.4.0 - 2021-06-04
  

  Added

  • withPageAuthRequired CSR now adds user to wrapped component props #405 (adamjmcgrath)

  Fixed

  • env var substitutions now means you can define AUTH0_BASE_URL from VERCEL_URL in next.config.js #404 (adamjmcgrath)
• 1.3.1 - 2021-05-05
  

  Fixed

  • Use window.location.toString() as the default returnTo value #370 (Widcket)
  • returnTo should be encoded as it contains url unsafe chars #365 (adamjmcgrath)
• 1.3.0 - 2021-03-26
  

  Added

  • Organizations support #343 (adamjmcgrath)

from @auth0/nextjs-auth0 GitHub release notes

Commit messages

Package name: @auth0/nextjs-auth0

• f653967 npm audit fix (#410)
• fdbf883 update formatting (#408)
• a56d3c3 Merge pull request #406 from auth0/base-path-i18n-guidance
• c1ab7aa update formatting
• 843fa67 Add guidance for handling Base Path and Internationalized Routing
• ab4056a Revert "Add guidance for handling Base Path and Internationalized Routing"
• 585dc79 Add guidance for handling Base Path and Internationalized Routing
• bba8851 Merge pull request #405 from auth0/with-page-auth-required-props
• dd9c8c2 Add `user` to `withPageAuthRequiredProps` CSR to match SSR
• 32e9200 Merge pull request #404 from auth0/deploy-instructions
• 7ca367a Add guidance and remove destructuring for `Define` plugin
• d52ade4 Update deploy instructions for new Vercel behavior
• 6350305 Merge pull request #344 from dan-auth0/dan-update-read-me
• dcbd58d Update README.md
• 6289d58 Merge branch 'main' into dan-update-read-me
• 825941a Release v1.3.1 (#389)
• b3e0e99 Bump jose (#375)
• d12946c Bump jose from 2.0.4 to 2.0.5 (#373)
• bc11293 Use `window.location.toString()` for returnTo (#370)
• 85018c7 Merge pull request #365 from auth0/encode-return-to
• 8382c3d fix tests
• fad8444 returnTo should be encoded as it contains url unsafe chars
• 2b5aeeb Merge pull request #363 from auth0/sdk-2456/remove-orgs-beta
• 25280ad Regenerate docs

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs