auth0/auth0-php vulnerabilities (Packagist)

5 vulnerabilities.

• auth0/auth0-php Packagist Auth0 PHP SDK Insufficient Entropy in Cookie Encryption CVE-2026-34236 Fix available 8.2 HighApril 1, 2026
• auth0/auth0-php Packagist Auth0-PHP SDK has Improper Audience Validation CVE-2025-68129 Fix available 6.8 MediumDecember 17, 2025
• auth0/auth0-php Packagist auth0-PHP: Improper File Type Handling in Bulk User Import CVE-2025-58769 Fix available 3.3 LowOctober 1, 2025
• auth0/auth0-php Packagist Auth0-PHP SDK Deserialization of Untrusted Data vulnerability CVE-2025-48951 Fix available 9.3 CriticalJune 3, 2025
• auth0/auth0-php Packagist Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK CVE-2025-47275 Fix available 9.1 CriticalMay 15, 2025