auth0

Top products

The 15 most recently published vulnerabilities affecting auth0.

• CVE-2026-50157Auth0 Symfony: Bearer Token Accepted via URL Query Parameter in Auth0 Symfony SDK6.5Sep 14, 2026
• CVE-2026-84685Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management6.5Sep 8, 2026
• CVE-2026-85983Local Privilege Escalation in Auth0 AD/LDAP Connector7.8Sep 8, 2026
• CVE-2026-85982Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector9.0Sep 8, 2026
• CVE-2026-85981Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector6.7Sep 8, 2026
• CVE-2026-42280Improper Permission Checking in Auth.js SDK7.1May 27, 2026
• CVE-2026-40155Auth0 Next.js SDK has Improper Proxy Cache Lookup5.4Apr 17, 2026
• CVE-2026-34236Auth0 PHP SDK Insufficient Entropy in Cookie Encryption8.2Apr 1, 2026
• CVE-2025-68129Auth0-PHP SDK has Improper Audience Validation6.8Dec 17, 2025
• CVE-2025-67716Auth0 Next.js SDK has Improper Validation of Query Parameters5.7Dec 11, 2025
• CVE-2025-67490Auth0 Next.js SDK has Improper Request Caching Lookup5.4Dec 10, 2025
• CVE-2025-65945auth0/node-jws improper HMAC signature verification vulnerability7.5Dec 4, 2025
• CVE-2025-58769auth0-PHP: Improper File Type Handling in Bulk User Import3.3Oct 1, 2025
• CVE-2025-48947NextJS-Auth0 SDK Vulnerable to CDN Caching of Session CookiesJun 4, 2025
• CVE-2025-48951Auth0-PHP SDK Deserialization of Untrusted Data vulnerabilityJun 3, 2025