https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:57:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-322486 EUVD-2026-322486 https://cve.radiocsirt.org/vuln/euvd-2026-322486 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42280 <p>Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0.</p> <p>Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42280 https://cve.radiocsirt.org/vuln/ghsa-8qjv-jj2q-x832 <p><strong>Affected:</strong> npm: auth0-js</p> <p>### Description Under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided.</p> <p>### Am I Affected? Users are affected if they meet each of the following preconditions: - Applications built using Auth0.js version between 8.11.0 and 9.32.0 - The application’s access control relies on rules defined in Auth0 Actions.</p> <p>### Affected product and versions auth0.js SDK v8.11.0 to v9.32.0</p> <p>### Resolution Upgrade auth0/auth0.js to v10.0.0 or greater.</p> <p>### Acknowledgements Okta would like to thank Quan Le (@aleister1102) for their discovery and responsible disclosure.</p> <p><strong>Affected:</strong> npm: auth0-js</p> <p>### Description Under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided.</p> <p>### Am I Affected? Users are affected if they meet each of the following preconditions: - Applications built using Auth0.js version between 8.11.0 and 9.32.0 - The application’s access control relies on rules defined in Auth0 Actions.</p> <p>### Affected product and versions auth0.js SDK v8.11.0 to v9.32.0</p> <p>### Resolution Upgrade auth0/auth0.js to v10.0.0 or greater.</p> <p>### Acknowledgements Okta would like to thank Quan Le (@aleister1102) for their discovery and responsible disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-8qjv-jj2q-x832