MEDIUM6.8Packagist
GHSA-7hh9-gp72-wh7hAuth0 Laravel SDK has Improper Audience Validation via Auth0-PHP SDK dependency
Modified: 2/4/2026
package
Packagist/auth0/login
pkg:packagist/auth0/login
CRITICAL9.1Packagist
GHSA-9fwj-9mjf-rhj3laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Modified: 2/4/2026
CRITICALPackagist
GHSA-c42h-56wx-h85qlaravel-auth0 SDK Deserialization of Untrusted Data vulnerability
Modified: 2/4/2026
HIGH8.2Packagist
GHSA-fmg6-246m-9g2vAuth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption
Modified: 4/3/2026
LOW3.3Packagist
GHSA-hjfh-5jmm-xr24laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
Modified: 2/4/2026