MEDIUM6.4npm
GHSA-6gg3-pmm7-97xc· CVE-2020-15119DOM-based XSS in auth0-lock
Modified: 7/8/2026
package
npm/auth0-lock
pkg:npm/auth0-lock
MEDIUM6.1npm
GHSA-7ww6-75fj-jcj7· CVE-2022-29172Cross-site Scripting in Auth0 Lock
Modified: 11/8/2023
HIGH8.1npm
GHSA-jr3j-whm4-9wwm· CVE-2021-32641Reflected XSS when using flashMessages or languageDictionary
Modified: 7/8/2026
MEDIUM6.1npm
GHSA-w2pf-g6r8-pg22· CVE-2019-20174auth0-lock vulnerable to XSS via unsanitized placeholder property
Modified: 11/8/2023