https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T15:38:02.801533+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-00242 cnvd-2018-00242 2026-10-28T15:38:02.804751+00:00 cnvd-2018-00242 https://cve.radiocsirt.org/vuln/euvd-2026-79356 EUVD-2026-79356 2026-10-28T15:38:02.804784+00:00 EUVD-2026-79356 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17068 fkie_cve-2017-17068 2026-10-28T15:38:02.804798+00:00

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with auth0.popup.callback().

 https://cve.radiocsirt.org/vuln/ghsa-3rpr-mg43-xhq4 GHSA-3rpr-mg43-xhq4 — auth0-js Privilege Escalation Vulnerability 2026-10-28T15:38:02.804827+00:00

Affected: npm: auth0-js

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions &lt; 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with `auth0.popup.callback()`.

 https://cve.radiocsirt.org/vuln/gsd-2017-17068 gsd-2017-17068 2026-10-28T15:38:02.804850+00:00 gsd-2017-17068