Auth0-php (Auth0) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 135 known versions, newest CVE from 2026-04-01. Vendor: Auth0.

CVEs of Auth0-php

• CVE-2026-34236 - CVSS 9.8 (critical), 2026-04-01: Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to before version 8.19.0, in applications built with the Auth0 PHP…
• CVE-2025-68129 - CVSS 7.5 (high), 2025-12-17: Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. In applications built with the Auth0-PHP SDK, the audience validation in access tokens is…
• CVE-2025-48951 - CVSS 9.3 (critical), 2025-06-03: Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.3.1 contain a vulnerability due to insecure…
• CVE-2025-47275 - CVSS 9.1 (critical), 2025-05-15: Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs. Starting in version 8.0.0-BETA1 and prior to version 8.14.0, session cookies of…