pkg:Packagist/auth0/auth0-php

5 total CVEsCRITICAL1HIGH1MEDIUM1LOW1

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.1CVE-2025-47275Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
    >= 8.0.0-BETA1, < 8.14.0
  • HIGH8.2CVE-2026-34236Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption
    >= 8.0.0, < 8.19.0
  • MEDIUM6.8CVE-2025-68129Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
    >= 8.0.0, < 8.18.0
  • LOW3.3CVE-2025-58769laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
    >= 3.3.0, < 8.17.0
  • —CVE-2025-48951Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
    >= 8.0.0-BETA3, < 8.3.1