Description
Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Auth0.AuthenticationApi | >= 5.8.0, < 6.5.4 | 6.5.4 | GHSA-c9cg-q8r2-xvjq |