Skip to content
OpenAdvisories

Package · Packagist

auth0/login

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical —
    GHSA-c42h-56wx-h85q

    laravel-auth0 SDK Deserialization of Untrusted Data vulnerability

    **Overview** The laravel-auth0 SDK contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing …

    auth0/login Packagist
  • Critical 9.1
    GHSA-9fwj-9mjf-rhj3

    laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions

    **Overview** Session cookies of applications using the laravel-auth0 SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. **Am I Affected?** You are affected by this vulnerability if you m…

    auth0/login Packagist