{"data":{"allContentfulSecurityAdvisories":{"nodes":[{"url":"/security-advisories/improper-access-control-in-auth0-ai-python-document-retrieval-cve-2026-108167","title":"Improper Access Control in auth0-ai-python Document Retrieval CVE-2026-108167 - Nov 10, 2026"},{"url":"/security-advisories/improper-backchannel-session-revocation-in-the-auth0-asp-net-core-authentication-sdk-cve-2026-126129","title":"Improper Backchannel Session Revocation in the Auth0 ASP.NET Core Authentication SDK CVE-2026-126129 - Nov 10, 2026"},{"url":"/security-advisories/improper-input-validation-of-path-parameters-auth0-node-js-sdk-cve-2026-126128","title":"Improper Input Validation of Path Parameters Auth0 Node.js SDK CVE-2026-126128 - Nov 10, 2026"},{"url":"/security-advisories/improper-access-control-in-auth0-ai-js-document-retrieval-cve-2026-107372","title":"Improper Access Control in auth0-ai-js Document Retrieval CVE-2026-107372 - Nov 10, 2026"},{"url":"/security-advisories/php-runtime-vulnerabilities-affecting-okta-access-gateway-cve-2026-109618-cve-2026-109619","title":"PHP Runtime Vulnerabilities Affecting Okta Access Gateway CVE-2026-109618 / CVE-2026-109619 - Oct 22, 2026"},{"url":"/security-advisories/command-execution-via-admin-console-input-in-okta-access-gateway-cve-2026-115547","title":"Command Execution via Admin Console Input in Okta Access Gateway CVE-2026-115547 - Oct 22, 2026"},{"url":"/security-advisories/authentication-source-verification-issue-in-okta-access-gateway-cve-2026-115546","title":"Authentication Source Verification Issue in Okta Access Gateway CVE-2026-115546 - Oct 22, 2026"},{"url":"/security-advisories/improper-input-validation-in-the-okta-credential-provider-for-windows-cve-2026-78628","title":"Improper Input Validation in the Okta Credential Provider for Windows CVE-2026-78628 - Oct 13, 2026"},{"url":"/security-advisories/missing-verification-of-auth_time-claim-in-auth0-js-cve-2026-107371","title":"Missing Verification of auth_time Claim in auth0.js CVE-2026-107371 - Oct 13, 2026"},{"url":"/security-advisories/improper-request-handling-for-active-directory-logins-in-auth0-lock-cve-2026-107370","title":"Improper Request Handling for Active Directory Logins in auth0-lock CVE-2026-107370 - Oct 13, 2026"},{"url":"/security-advisories/insecure-default-file-permissions-in-okta-radius-agent-windows-installer-cve-2026-78632","title":"Insecure Default File Permissions in Okta RADIUS Agent Windows Installer CVE-2026-78632 - Oct 13, 2026"},{"url":"/security-advisories/denial-of-service-in-okta-radius-agent-packet-parser-cve-2026-78633","title":"Denial of Service in Okta RADIUS Agent Packet Parser CVE-2026-78633 - Oct 13, 2026"},{"url":"/security-advisories/out-of-range-timestamp-claim-handling-in-auth0-java-jwt-cve-2026-85473","title":"Out-of-Range Timestamp Claim Handling in auth0/java-jwt CVE-2026-85473 - Oct 13, 2026"},{"url":"/security-advisories/improper-validation-of-post-login-redirect-url-in-nextjs-auth0-cve-2026-107369","title":"Improper Validation of Post-Login Redirect URL in nextjs-auth0 CVE-2026-107369 - Oct 13, 2026"},{"url":"/security-advisories/improper-link-resolution-in-okta-verify-for-windows-uninstaller-data-removal-cve-2026-78622","title":"Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal CVE-2026-78622 - Sep 8, 2026"},{"url":"/security-advisories/local-privilege-escalation-in-auth0-ad-ldap-connector-cve-2026-85983","title":"Local Privilege Escalation in Auth0 AD/LDAP Connector CVE-2026-85983 - Sep 8, 2026"},{"url":"/security-advisories/stored-cross-site-scripting-xss-in-auth0-ad-ldap-connector-cve-2026-85982","title":"Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector CVE-2026-85982 - Sep 8, 2026"},{"url":"/security-advisories/unauthenticated-localhost-admin-panel-in-auth0-ad-ldap-connector-cve-2026-85981","title":"Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector CVE-2026-85981 - Sep 8, 2026"},{"url":"/security-advisories/improper-cache-isolation-in-auth0-react-native-auth0-sdk-web-platform-credential-management-cve-2026-84685","title":"Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management CVE-2026-84685 - Sep 8, 2026"},{"url":"/security-advisories/improper-assembly-resolution-in-okta-hyperdrive-integration-plugin-registry-handling-cve-2026-78574","title":"Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling CVE-2026-78574 - Sep 8, 2026"},{"url":"/security-advisories/improper-input-sanitization-in-okta-access-gateway-protected-rules-cve-2026-78626","title":"Improper Input Sanitization in Okta Access Gateway Protected Rules CVE-2026-78626 - Sep 8, 2026"},{"url":"/security-advisories/improper-credential-protection-in-okta-hyperdrive-integration-installer-logging-cve-2026-78627","title":"Improper Credential Protection in Okta Hyperdrive Integration Installer Logging CVE-2026-78627 - Sep 8, 2026"},{"url":"/security-advisories/improper-input-sanitization-in-okta-access-gateway-ldap-datastore-filter-interpolation-cve-2026-78579","title":"Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation CVE-2026-78579 - Sep 8, 2026"},{"url":"/security-advisories/improper-path-validation-in-okta-access-gateway-kerberos-configuration-handling-cve-2026-78620","title":"Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling CVE-2026-78620 - Sep 8, 2026"},{"url":"/security-advisories/improper-input-validation-in-the-okta-privileged-access-ssh-client-url-handler-argument-cve-2026-78635","title":"Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument CVE-2026-78635 - Sep 8, 2026"},{"url":"/security-advisories/improper-authentication-verification-in-the-okta-hyperdrive-agent-mfa-response-handling-cve-2026-78629","title":"Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling CVE-2026-78629 - Sep 8, 2026"},{"url":"/security-advisories/improper-input-neutralization-in-okta-access-gateway-snmp-configuration-processing-cve-2026-78630","title":"Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing CVE-2026-78630 - Sep 8, 2026"},{"url":"/security-advisories/improper-restriction-of-sensitive-information-in-okta-hyperdrive-agent-logging-cve-2026-78631","title":"Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging CVE-2026-78631 - Sep 8, 2026"},{"url":"/security-advisories/improper-input-sanitization-in-okta-access-gateway-application-label-configuration-cve-2026-78545","title":"Improper Input Sanitization in Okta Access Gateway Application Label Configuration CVE-2026-78545 - Sep 8, 2026"},{"url":"/security-advisories/improper-input-handling-in-okta-access-gateway-management-console-exception-handler-cve-2026-78550","title":"Improper Input Handling in Okta Access Gateway Management Console Exception Handler CVE-2026-78550 - Sep 8, 2026"},{"url":"/security-advisories/improper-handling-of-saml-assertion-attributes-in-okta-access-gateway-advanced-mode-datastores-cve-2026-78623","title":"Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores CVE-2026-78623 - Sep 8, 2026"},{"url":"/security-advisories/validation-bypass-in-okta-access-gateway-custom-directives-cve-2026-78552","title":"Validation Bypass in Okta Access Gateway Custom Directives CVE-2026-78552 - Sep 8, 2026"},{"url":"/security-advisories/improper-authentication-validation-in-okta-access-gateway-pass-through-authentication-source-cve-2026-78560","title":"Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source CVE-2026-78560 - Sep 8, 2026"},{"url":"/security-advisories/improper-path-validation-in-okta-access-gateway-backup-and-restore-functionality-cve-2026-78624","title":"Improper Path Validation in Okta Access Gateway Backup and Restore Functionality CVE-2026-78624 - Sep 8, 2026"},{"url":"/security-advisories/insufficient-validation-of-dashboard-application-labels-in-okta-access-gateway-dashboard-site-configuration-cve-2026-78625","title":"Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration CVE-2026-78625 - Sep 8, 2026"},{"url":"/security-advisories/improper-validation-ssh-target-in-okta-privileged-access-client-cve-2026-77585","title":"Improper Validation of SSH Target in Okta Privileged Access Client CVE-2026-77585 - Aug 25, 2026"},{"url":"/security-advisories/bearer-token-accepted-via-url-query-parameter-auth0-symfony-sdk-cve-2026-50157","title":"Bearer Token Accepted via URL Query Parameter in Auth0 Symfony SDK CVE-2026-50157 - Jun 10, 2026"},{"url":"/security-advisories/improper-permission-checking-auth0-js-sdk-cve-2026-42280","title":"Improper Permission Checking in Auth0.js SDK CVE-2026-42280 - May 6, 2026"},{"url":"/security-advisories/improper-proxy-cache-lookup-auth0-next-js-sdk-cve-2026-40155","title":"Improper Proxy Cache Lookup in the Auth0 Next.js SDK CVE-2026-40155 - Apr 17, 2026"},{"url":"/security-advisories/insufficient-entropy-cookie-encryption-auth0-symfony-sdk-cve-2026-34236","title":"Insufficient Entropy in Cookie Encryption in Auth0 Symfony SDK CVE-2026-34236 - Apr 1, 2026"},{"url":"/security-advisories/insufficient-entropy-cookie-encryption-auth0-wordpress-plugin-cve-2026-34236","title":"Insufficient Entropy in Cookie Encryption in Auth0 WordPress Plugin CVE-2026-34236 - Apr 1, 2026"},{"url":"/security-advisories/insufficient-entropy-cookie-encryption-auth0-laravel-auth0-sdk-cve-2026-34236","title":"Insufficient Entropy in Cookie Encryption in Auth0 laravel-auth0 SDK CVE-2026-34236 - Apr 1, 2026"},{"url":"/security-advisories/auth0-php-sdk-insufficient-entropy-cookie-encryption-cve-2026-34236","title":"Auth0 PHP SDK Insufficient Entropy in Cookie Encryption CVE-2026-34236 - Apr 1, 2026"},{"url":"/security-advisories/improper-validation-of-query-parameters-auth0-next-js-sdk-cve-2025-67716","title":"Improper Validation of Query Parameters in Auth0 Next.js SDK CVE-2025-67716 - Dec 10, 2025"},{"url":"/security-advisories/improper-request-caching-lookup-auth0-next-js-sdk-cve-2025-67490","title":"Improper Request Caching Lookup in the Auth0 Next.js SDK CVE-2025-67490 - Dec 10, 2025"},{"url":"/security-advisories/improper-memory-cleanup-okta-java-sdk-cve-2025-66033","title":"Improper Memory Cleanup in the Okta Java SDK CVE-2025-66033 - Dec 10, 2025"},{"url":"/security-advisories/race-condition-okta-java-sdk-cve-2025-67505","title":"Race condition in the Okta Java SDK CVE-2025-67505 - Dec 10, 2025"},{"url":"/security-advisories/improper-hmac-signature-verification-auth0-node-jws-cve-2025-65945","title":"Improper HMAC Signature Verification in auth0/node-jws CVE-2025-65945 - Dec 4, 2025"},{"url":"/security-advisories/improper-file-type-handling-bulk-user-import-auth0-wordpress-plugin-cve-2025-58769","title":"Improper File Type Handling in Bulk User Import in Auth0 Wordpress plugin CVE-2025-58769 - Oct 1, 2025"},{"url":"/security-advisories/improper-file-type-handling-bulk-user-import-auth0-symfony-sdk-cve-2025-58769","title":"Improper File Type Handling in Bulk User Import in Auth0 Symfony SDK CVE-2025-58769 - Oct 1, 2025"},{"url":"/security-advisories/improper-file-type-handling-bulk-user-import-laravel-auth0-sdk-cve-2025-58769","title":"Improper File Type Handling in Bulk User Import in laravel-auth0 SDK CVE-2025-58769 - Oct 1, 2025"},{"url":"/security-advisories/improper-file-type-handling-bulk-user-import-auth0-php-sdk-cve-2025-58769","title":"Improper File Type Handling in Bulk User Import in auth0-PHP SDK CVE-2025-58769 - Oct 1, 2025"},{"url":"/security-advisories/okta-on-premises-provisioning-opp-password-reset-information-disclosure-cve-2025-7371","title":"Okta On-Premises Provisioning (OPP) Password Reset Information Disclosure CVE-2025-7371 - Jul 22, 2025"},{"url":"/security-advisories/cdn-caching-of-session-cookies-nextjs-auth0-sdk-cve-2025-48947","title":"CDN Caching of Session Cookies in NextJS-Auth0 SDK CVE-2025-48947 - Jun 3, 2025"},{"url":"/security-advisories/deserialization-of-untrusted-data-auth0-php-sdk-cve-2025-48951","title":"Deserialization of Untrusted Data in Auth0-PHP SDK CVE-2025-48951 - Jun 3, 2025"},{"url":"/security-advisories/deserialization-of-untrusted-data-in-auth0-symfony-sdk-cve-2025-48951","title":"Deserialization of Untrusted Data in Auth0 Symfony SDK CVE-2025-48951 - Jun 3, 2025"},{"url":"/security-advisories/deserialization-of-untrusted-data-laravel-auth0-sdk-cve-2025-48951","title":"Deserialization of Untrusted Data in laravel-auth0 SDK CVE-2025-48951 - Jun 3, 2025"},{"url":"/security-advisories/deserialization-of-untrusted-data-auth0-wordpress-plugin-cve-2025-48951","title":"Deserialization of Untrusted Data in Auth0 Wordpress Plugin CVE-2025-48951 - Jun 3, 2025"},{"url":"/security-advisories/brute-force-authentication-tags-of-cookiestore-sessions-in-auth0-php-sdk-cve-2025-47275","title":"Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK CVE-2025-47275 - May 15, 2025"},{"url":"/security-advisories/brute-force-authentication-tags-of-cookiestore-sessions-auth0-php-sdk-cve-2025-47275","title":"Brute Force Authentication Tags of CookieStore Sessions in Auth0 Symfony SDK CVE-2025-47275 - May 15, 2025"},{"url":"/security-advisories/brute-force-authentication-tags-cookiestore-sessions-auth0-wordpress-plugin-cve-2025-47275","title":"Brute Force Authentication Tags of CookieStore Sessions in Auth0 Wordpress plugin CVE-2025-47275 - May 15, 2025"},{"url":"/security-advisories/brute-force-authentication-tags-of-cookiestore-sessions-laravel-auth0-sdk-cve-2025-47275","title":"Brute Force Authentication Tags of CookieStore Sessions in laravel-auth0 SDK CVE-2025-47275 - May 15, 2025"},{"url":"/security-advisories/saml-attribute-smuggling-vulnerability-allowing-user-impersonation-passport-ws-fed-cve-2025-46573","title":"SAML Attribute Smuggling Vulnerability Allowing User Impersonation in Passport-WS-Fed CVE-2025-46573 - May 6, 2025"},{"url":"/security-advisories/saml-signature-wrapping-vulnerability-leading-to-user-impersonation-in-passport-ws-fed-cve-2025-46572","title":"SAML Signature Wrapping Vulnerability Leading to User Impersonation in Passport-WS-Fed CVE-2025-46572 - May 6, 2025"},{"url":"/security-advisories/jwt-invalid-signature-validation-in-auth0-account-linking-extensions-cve-2025-46345","title":"JWT Invalid Signature Validation in Auth0 Account Linking Extensions CVE-2025-46345 - Apr 30, 2025"},{"url":"/security-advisories/okta-verify-desktop-mfa-for-windows-passwordless-login-cve-2024-9191","title":"Okta Verify Desktop MFA for Windows Passwordless Login CVE-2024-9191 - Nov 1, 2024"},{"url":"/security-advisories/okta-ad-ldap-delegated-authentication-username","title":"Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security Advisory - Nov 1, 2024"},{"url":"/security-advisories/okta-verify-for-ios-cve-2024-10327","title":"Okta Verify for iOS ContextExtension CVE-2024-10327 - Oct 24, 2024"},{"url":"/security-advisories/okta-classic-application-sign-on-policy-bypass-2024","title":"Okta Classic Application Sign-On Policy Bypass - Oct 4, 2024"},{"url":"/security-advisories/okta-verify-for-windows-privilege-escalation-cve-2024-7061","title":"Okta Verify for Windows Privilege Escalation CVE-2024-7061 - Aug 7, 2024"},{"url":"/security-advisories/okta-browser-plugin-reflected-cross-site-scripting-cve-2024-0981","title":"Okta Browser Plugin Reflected Cross-Site Scripting CVE-2024-0981 - Jul 22, 2024"},{"url":"/security-advisories/okta-verify-windows-auto-update-arbitrary-code-execution-cve-2024-0980","title":"Okta Verify for Windows Auto-update Arbitrary Code Execution CVE-2024-0980 - Mar 26, 2024"},{"url":"/security-advisories/okta-ldap-agent-cve-2023-0392","title":"Okta LDAP Agent CVE-2023-0392 - Sep 19, 2023"},{"url":"/security-advisories/okta-advanced-server-access-client-cve-2023-0093","title":"Okta Advanced Server Access Client CVE-2023-0093 - Feb 22, 2023"},{"url":"/security-advisories/okta-access-gateway-advisory-cve-2022-3602-and-cve-2022-3786","title":"Okta Access Gateway Advisory for CVE-2022-3602 and CVE-2022-3786 - Nov 1, 2022"},{"url":"/security-advisories/okta-active-directory-agent-cve-2022-1697","title":"Okta Active Directory Agent CVE-2022-1697 - Sep 1, 2022"},{"url":"/security-advisories/okta-advanced-server-access-client-cve-2022-1030","title":"Okta Advanced Server Access Client CVE-2022-1030 - Mar 21, 2022"},{"url":"/security-advisories/okta-advanced-server-access-client-cve-2022-24295","title":"Okta Advanced Server Access Client CVE-2022-24295 - Feb 17, 2022"},{"url":"/security-advisories/okta-radius-server-agent-cve-2021-45105","title":"Okta RADIUS Server Agent CVE-2021-45105 - Jan 26, 2022"},{"url":"/security-advisories/okta-prem-mfa-agent-cve-2021-45046","title":"Okta On-Prem MFA Agent CVE-2021-45046 - Jan 26, 2022"},{"url":"/security-advisories/okta-radius-server-agent-cve-2021-45046","title":"Okta RADIUS Server Agent CVE-2021-45046 - Jan 26, 2022"},{"url":"/security-advisories/okta-prem-mfa-agent-cve-2021-44228","title":"Okta On-Prem MFA Agent CVE-2021-44228 - Jan 26, 2022"},{"url":"/security-advisories/okta-radius-server-agent-cve-2021-44228","title":"Okta RADIUS Server Agent CVE-2021-44228 - Jan 26, 2022"},{"url":"/security-advisories/okta-prem-mfa-agent-cve-2021-45105","title":"Okta On-Prem MFA Agent CVE-2021-45105 - Jan 26, 2022"},{"url":"/security-advisories/okta-access-gateway-cve-2021-28113","title":"Okta Access Gateway CVE-2021-28113 - Apr 2, 2021"}]}}}