Skip to content
OpenAdvisories

Vendor

auth0-extensions

1 known vulnerabilities.

Products

auth0-account-link-extension 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-46345

    Auth0 Account Link Extension JWT Invalid Signature Validation

    Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information wi…

    auth0-extensions auth0-account-link-extension