Skip to content
OpenAdvisories

Package · Packagist

auth0/symfony

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-50157

    Auth0 Symfony: Bearer Token Accepted via URL Query Parameter in Auth0 Symfony SDK

    Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate() and Authorizer::supports() paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from …

    auth0 symfony auth0/symfony Packagist
  • Medium 6.8
    GHSA-f3r2-88mq-9v4g

    Auth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK

    ### Description In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly. Without proper validation, affected applications may accept ID tokens as Access tokens. ### Affected product and versions Projects …

    auth0/symfony Packagist