auth0-js vulnerabilities (npm)

5 vulnerabilities.

• auth0-js npm Improper Permission Checking in Auth.js SDK CVE-2026-42280 Fix available 7.1 HighMay 6, 2026
• auth0-js npm Information disclosure through error object CVE-2020-5263 Fix available 5.5 MediumApril 9, 2020
• auth0-js npm Cross-Site Request Forgery (CSRF) in Auth0 CVE-2018-6874 Fix available 8.8 HighApril 4, 2018
• auth0-js npm Auth0-js bypasses CSRF checks CVE-2018-7307 Fix available 8.8 HighMarch 6, 2018
• auth0-js npm auth0-js Privilege Escalation Vulnerability CVE-2017-17068 Fix available 7.5 HighDecember 6, 2017