Skip to content
OpenAdvisories

Package · RubyGems

omniauth-auth0

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2020-15240

    Regression in JWT Signature Validation

    omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_validator.verify` method. Improper validation of the JWT token signature can allow an attacker to bypass authentication and authorization. …

    auth0 omniauth-auth0 omniauth-auth0 RubyGems