Security: auth0/auth0-PHP
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Auth0 PHP SDK Insufficient Entropy in Cookie EncryptionGHSA-w3wc-44p4-m4j7 published
Apr 1, 2026 by jennyyang-oktaHigh -
Improper Audience Validation in Auth0 PHP SDKGHSA-j2vm-wrq3-f7gf published
Dec 17, 2025 by jennyyang-oktaModerate -
Improper File Type Handling in Bulk User Import in auth0-PHP SDKGHSA-9mh6-g99m-ppcw published
Oct 1, 2025 by jennyyang-oktaLow -
Deserialization of Untrusted Data in Auth0-PHP SDKGHSA-v9m8-9xxp-q492 published
Jun 3, 2025 by femiajiboye-oktaCritical -
Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDKGHSA-g98g-r7gf-2r25 published
May 15, 2025 by femiajiboye-oktaCritical