HIGH8.2Packagist
GHSA-w3wc-44p4-m4j7· CVE-2026-34236Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption
Modified: 4/1/2026
package
Packagist/auth0/auth0-php
pkg:packagist/auth0/auth0-php
LOW3.3Packagist
GHSA-9mh6-g99m-ppcw· CVE-2025-58769auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import
Modified: 2/4/2026
CRITICAL9.1Packagist
GHSA-g98g-r7gf-2r25· CVE-2025-47275Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
Modified: 2/4/2026
MEDIUM6.8Packagist
GHSA-j2vm-wrq3-f7gf· CVE-2025-68129Auth0-PHP SDK has Improper Audience Validation
Modified: 2/4/2026
CRITICALPackagist
GHSA-v9m8-9xxp-q492· CVE-2025-48951Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
Modified: 2/4/2026