Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value.EPSS 0.3%Oct 13, 2026
- Medium6.5The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute.EPSS 0.2%Oct 13, 2026
- Medium5.3The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing th…EPSS 0.1%Oct 13, 2026
- Medium6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure.EPSS 0.1%Oct 13, 2026
- Medium5.4When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time claim in the resulting ID token against the request…EPSS 0.2%Oct 13, 2026
- Medium5.3When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request…EPSS 0.3%Oct 13, 2026
- Medium6.1The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL.EPSS 0.2%Oct 13, 2026
- Medium5.4The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Apr 17, 2026
- High8.8OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub.Apr 3, 2026
- Critical9.8Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.Apr 1, 2026
- Medium5.4An issue was discovered in allauth-django before 65.13.0.EPSS 0.2%Dec 15, 2025
- Medium5.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.EPSS 0.3%Dec 11, 2025
12 records · page 1 of 1
PreviousNext