https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T00:20:24.375736+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-05988 cnvd-2018-05988 2026-10-15T00:20:24.379037+00:00 cnvd-2018-05988 https://cve.radiocsirt.org/vuln/euvd-2026-63172 EUVD-2026-63172 2026-10-15T00:20:24.379068+00:00 EUVD-2026-63172 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7307 fkie_cve-2018-7307 2026-10-15T00:20:24.379081+00:00

The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.

 https://cve.radiocsirt.org/vuln/ghsa-wpq7-q8j4-72jg GHSA-wpq7-q8j4-72jg — Auth0-js bypasses CSRF checks 2026-10-15T00:20:24.379108+00:00

Affected: npm: auth0-js

The Auth0.js library has a vulnerability affecting versions below 9.3 that allows an attacker to bypass the CSRF check from the state parameter if it's missing from the authorization response, leaving the client vulnerable to CSRF attacks.

 https://cve.radiocsirt.org/vuln/gsd-2018-7307 gsd-2018-7307 2026-10-15T00:20:24.379131+00:00 gsd-2018-7307