AU
Product
auth0.js
by auth0 · last CVE Oct 13, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch

Add auth0.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-6873
9.8
2%
Apr 4
The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated
Affected: through 8.10.1
Showing 1