pkg:Packagist/auth0/auth0-php

All known vulnerabilities

• CRITICAL9.1CVE-2025-47275Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
  >= 8.0.0-BETA1, < 8.14.0
• HIGH8.2CVE-2026-34236Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption
  >= 8.0.0, < 8.19.0
• MEDIUM6.8CVE-2025-68129Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
  >= 8.0.0, < 8.18.0
• LOW3.3laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
  >= 3.3.0, < 8.17.0
• —Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
  >= 8.0.0-BETA3, < 8.3.1