Skip to content
OpenAdvisories

Package · Packagist

auth0/symfony

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical —
    GHSA-98j6-67v3-mw34

    Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability

    **Overview** The Auth0 Symfony SDK contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing …

    auth0/symfony Packagist
  • Critical 9.1
    GHSA-9wg9-93h9-j8ch

    Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions

    **Overview** Session cookies of applications using the Auth0 symfony SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. **Am I Affected?** You are affected by this vulnerability if you m…

    auth0/symfony Packagist