Skip to content
OpenAdvisories

Package · npm

auth0-lock

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2021-32641

    Reflected XSS when using flashMessages

    auth0-lock is Auth0's signin solution. Versions of nauth0-lock before and including `11.30.0` are vulnerable to reflected XSS. An attacker can execute arbitrary code when the library's `flashMessage` feature is utilized and user input or data from URL paramet…

    auth0 lock auth0-lock npm