What’s Vulnerable › Products

auth0-PHP vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your auth0-PHP version is affected

Latest auth0-PHP vulnerabilities

• CVE-2026-34236 — Auth0 PHP SDK Insufficient Entropy in Cookie Encryption (CVSS 9.8)
• CVE-2025-68129 — Auth0-PHP SDK has Improper Audience Validation (CVSS 7.5)
• CVE-2025-48951 — Auth0-PHP SDK Deserialization of Untrusted Data vulnerability (CVSS 9.3)
• CVE-2025-47275 — Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK (CVSS 9.1)