Auth0 Omniauth-Auth0
1 CVEs affecting Auth0 Omniauth-Auth0. Latest disclosed: 2020-10-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15240 | High | 7.4 | 2020-10-21 | omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_validator.verify` method. Improper vali… |