CVE-2025-58769
1 advisory.
Packagist/auth0/auth0-php CVE-2025-58769: low 3.3
auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import
Action: Upgrade auth0/auth0-php to 8.17.0 or later.
composer require auth0/auth0-php:8.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.0 | 8.17.0 | - |
Fixed versions
| 8.17.0 |
Sources
- osv: GHSA-9mh6-g99m-ppcw
- https://github.com/auth0/auth0-PHP/security/advisories/GHSA-9mh6-g99m-ppcw
- https://github.com/auth0/laravel-auth0/security/advisories/GHSA-hjfh-5jmm-xr24
- https://github.com/auth0/symfony/security/advisories/GHSA-7jp2-5h22-m432
- https://github.com/auth0/wordpress/security/advisories/GHSA-w22c-pw5m-482x
- https://nvd.nist.gov/vuln/detail/CVE-2025-58769
- https://github.com/auth0/auth0-PHP/commit/9026da58f5c381cd4cb5932de829eff6eacbb65c
- https://github.com/auth0/auth0-PHP
- https://github.com/auth0/auth0-PHP/releases/tag/8.17.0
CVE-2025-58769 · published · modified · JSON