pkg:Packagist/auth0/symfony

All known vulnerabilities

• CRITICAL9.1CVE-2025-47275Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
  from 0, < 5.4.0
• MEDIUM6.8CVE-2025-68129Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
  >= 5.0.0, < 5.6.0
• MEDIUM6.5CVE-2026-50157Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter
  >= 5.0.0-BETA0, < 5.9.0
• LOW3.3laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
  >= 2.0.2, < 5.5.0
• —Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
  >= 5.0.0-BETA0, < 5.1.0