auth0-lock vulnerabilities (npm)

4 vulnerabilities.

• auth0-lock npm HTML injection with additional signup fields CVE-2022-29172 Fix available 6.1 MediumMay 5, 2022
• auth0-lock npm Reflected XSS when using flashMessages CVE-2021-32641 Fix available 8.1 HighJune 4, 2021
• auth0-lock npm DOM-based XSS in auth0-lock CVE-2020-15119 Fix available 6.4 MediumAugust 19, 2020
• auth0-lock npm auth0-lock vulnerable to XSS via unsanitized placeholder property CVE-2019-20174 Fix available 6.1 MediumJanuary 31, 2020