Vendor
auth0
Public exploit1Avg CVSS6.9
CVEs in the catalog
35
since 2020-04
Months in the top 100
9
months with a stored rank
Best rank
#44
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| nextjs auth0 | 7 | 20% |
| auth0 php | 4 | 11% |
| auth0 ad ldap connector | 3 | 9% |
| lock | 3 | 9% |
| node jsonwebtoken | 3 | 9% |
| passport wsfed saml2 | 3 | 9% |
| auth0 js | 2 | 6% |
| express openid connect | 2 | 6% |
| ad ldap connector | 1 | 3% |
| express jwt | 1 | 3% |
| laravel auth0 | 1 | 3% |
| login by auth0 | 1 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-287 | 7 | 20% |
| CWE-79 | 6 | 17% |
| CWE-863 | 4 | 11% |
| CWE-347 | 2 | 6% |
| CWE-601 | 2 | 6% |
| CWE-1259 | 1 | 3% |
| CWE-184 | 1 | 3% |
| CWE-209 | 1 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-84685 | CWE-488 | none yet | 6.5 | 2026-09-08 |
| CVE-2026-85983 | CWE-94 | none yet | 7.8 | 2026-09-08 |
| CVE-2026-85982 | CWE-79 | none yet | 9 | 2026-09-08 |
| CVE-2026-85981 | CWE-306 | none yet | 6.7 | 2026-09-08 |
| CVE-2026-42280 | CWE-863 | none yet | 7.1 | 2026-05-27 |
| CVE-2026-40155 | CWE-863, CWE-362 | none yet | 5.4 | 2026-04-17 |
| CVE-2026-34236 | CWE-331 | none yet | 8.2 | 2026-04-01 |
| CVE-2025-68129 | CWE-863 | none yet | 6.8 | 2025-12-17 |
| CVE-2025-67716 | CWE-184 | none yet | 5.7 | 2025-12-11 |
| CVE-2025-67490 | CWE-863 | none yet | 5.4 | 2025-12-10 |
| CVE-2025-65945 | CWE-347 | 1 | 7.5 | 2025-12-04 |
| CVE-2025-58769 | CWE-22, CWE-73 | none yet | 3.3 | 2025-10-01 |
| CVE-2025-48947 | CWE-525 | none yet | 7.7 | 2025-06-04 |
| CVE-2025-48951 | CWE-502 | none yet | 9.3 | 2025-06-03 |
| CVE-2025-47275 | CWE-287 | none yet | 9.1 | 2025-05-15 |