auth0/auth0-php Security Advisories | GitStock

high2026-04-01

Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption

GHSA-w3wc-44p4-m4j7 · CVE-2026-34236

medium2025-12-17

Auth0-PHP SDK has Improper Audience Validation

GHSA-j2vm-wrq3-f7gf · CVE-2025-68129

low2025-10-01

auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import

GHSA-9mh6-g99m-ppcw · CVE-2025-58769

critical2025-06-04

Auth0-PHP SDK Deserialization of Untrusted Data vulnerability

GHSA-v9m8-9xxp-q492 · CVE-2025-48951

critical2025-05-16

Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK

GHSA-g98g-r7gf-2r25 · CVE-2025-47275