CVE-2020-15125
1 advisory.
npm/auth0 CVE-2020-15125: high 7.7, EPSS 1.54%
Authorization header is not sanitized in an error object in auth0
Action: Upgrade auth0 to 2.27.1 or later.
npm i auth0@2.27.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.27.1 | - |
Fixed versions
| 2.27.1 |
Sources
- osv: GHSA-5jpf-pj32-xx53
- https://github.com/auth0/node-auth0/security/advisories/GHSA-5jpf-pj32-xx53
- https://nvd.nist.gov/vuln/detail/CVE-2020-15125
- https://github.com/auth0/node-auth0/pull/507
- https://github.com/auth0/node-auth0/pull/507/commits/62ca61b3348ec8e74d7d00358661af1a8bc98a3c
- https://github.com/auth0/node-auth0/tree/v2.27.1
CVE-2020-15125 · published · modified · JSON