AU
Product
auth0.js
by auth0 · last CVE Oct 13, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch

Add auth0.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107371
5.4
0%
Oct 13
Missing Verification of auth_time Claim in auth0.js
Affected: 9.12.0 before 10.3.0
CVE-2020-5263
4.9
1%
Apr 9
auth0.js (NPM package auth0-js) greater than version 8.0.0 and before version 9.12.3 has a vulnerability
Affected: 8.0.0 through 9.13.1
Showing 2