GHSA-8qjv-jj2q-x832
High · 7.1CVSS
7.1
EPSS
—
Published
May 6, 2026
CISA due date
—
The record
Auth.js SDK has Improper Permission Checking
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | auth0-js | 8.11.0 | 10.0.0 |
Related vulnerabilities
- CVE-2026-42280 Auth0.js is a client-side JavaScript library for Auth0. Same vulnerability
- CVE-2026-96398 Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. CWE-863
- CVE-2026-96384 Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful… CWE-863
- CVE-2026-96370 Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request… CWE-863
- CVE-2026-96373 Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. CWE-863
- CVE-2026-96366 Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. CWE-863
- CVE-2026-96356 Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. CWE-863
- CVE-2026-84917 Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful… CWE-863