What’s Vulnerable › Products

auth0 express-openid-connect vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your auth0 express-openid-connect version is affected

Latest auth0 express-openid-connect vulnerabilities

• CVE-2022-24794 — Open Redirect in express-openid-connect (CVSS 6.1)
• CVE-2021-41246 — Session fixation in express-openid-connect (CVSS 8.8)