Skip to content

Product

auth0 node-auth0 vulnerabilities

1 published CVE affecting auth0 node-auth0, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest auth0 node-auth0 CVEs

Newest publication first

  1. CVE-2020-15125 Authorization header is not sanitized in an error object in auth0

    Published
    HighCVSS 7.7 EPSS 1.5%

    In auth0 (npm package) versions before 2.27.1, a DenyList of specific keys that should be sanitized from the request object contained in the error object is used. The key for Authorization header is not sanitized and in certain cases the Authorization header value can be logged e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.