Skip to content
OpenAdvisories

Vendor

auth0

44 known vulnerabilities.

Products

nextjs-auth0 8 auth0-PHP 4 lock 3 auth0.js 3 passport-wsfed-saml2 3 node-jsonwebtoken 3 Auth0 AD/LDAP Connector 3 express-openid-connect 2 auth0-lock 1 symfony 1 node-auth0 1 express-jwt 1 ad-ldap-connector 1 omniauth-auth0 1 react-native-auth0 1 Login by Auth0 1 Auth0 ASP.NET Core Authentication 1 Auth0 Node JS 1 auth0-ai-llamaindex 1 auth0-ai-langchain 1 Auth0 AI JS 1 java-jwt 1 laravel-auth0 1 node-jws 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-65945 Public exploit

    auth0/node-jws improper HMAC signature verification vulnerability

    auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are …

    auth0 node-jws jws npm