AU
Product
auth0-PHP
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 0Low 0
Watch
Add auth0-PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34236 | 9.8 | Apr 1 | Auth0 PHP SDK Insufficient Entropy in Cookie Encryption Affected: >= 8.0.0, < 8.19.0 |
| CVE-2025-48951 | 9.3 | Jun 3 | Auth0-PHP SDK Deserialization of Untrusted Data vulnerability Affected: >= 8.0.0-BETA3, < 8.3.1 |
| CVE-2025-47275 | 9.1 | May 15 | Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK Affected: >= 8.0.0-BETA1, < 8.14.0 |
Showing 3