Welcome to the Auth0 Community!
The reason why your session is not being invalidated after a password reset has to do with the application session still being active.
I suggest referring to our User is Not Logged Out after Password Reset knowledge solution for more information around terminating the application session after a user has reset their password.
Let us know if you have any additional questions.
Thanks,
Rueben