HIGH8.2Packagist
GHSA-w3wc-44p4-m4j7· CVE-2026-34236Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption
Modified: 4/1/2026
package
pkg:packagist/auth0/auth0-php
Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption
Modified: 4/1/2026
auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import
Modified: 2/4/2026
Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
Modified: 2/4/2026
Auth0-PHP SDK has Improper Audience Validation
Modified: 2/4/2026
Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
Modified: 2/4/2026