What’s Vulnerable › Products

auth0.js vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your auth0.js version is affected

Latest auth0.js vulnerabilities

• CVE-2026-107371 — Missing Verification of auth_time Claim in auth0.js (CVSS 5.4)
• CVE-2026-42280 — Improper Permission Checking in Auth.js SDK (CVSS 7.1)
• CVE-2020-15125 — Authorization header is not sanitized in an error object in auth0 (CVSS 7.7)
• CVE-2020-5263 — Information disclosure through error object (CVSS 4.9)
• CVE-2018-6874 — (CVSS 8.8)
• CVE-2018-6873 — (CVSS 9.8)
• CVE-2018-7307 — (CVSS 8.8)
• CVE-2017-17068 — (CVSS 7.5)