LOW3.3Packagist
GHSA-7jp2-5h22-m432Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import
Modified: 2/4/2026
package
Packagist/auth0/symfony
pkg:packagist/auth0/symfony
CRITICALPackagist
GHSA-98j6-67v3-mw34Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability
Modified: 2/4/2026
CRITICAL9.1Packagist
GHSA-9wg9-93h9-j8chAuth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Modified: 2/5/2026
MEDIUM6.8Packagist
GHSA-f3r2-88mq-9v4gAuth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK
Modified: 2/4/2026
MEDIUM6.5Packagist
GHSA-ffq7-hh2j-r24p· CVE-2026-50157Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter
Modified: 7/28/2026
HIGH8.2Packagist
GHSA-ghc5-95c2-vwcvAuth0 Symfony SDK has Insufficient Entropy in Cookie Encryption
Modified: 4/3/2026