CVE-2026-42280
1 advisory.
npm/auth0-js CVE-2026-42280: high 7.1
Auth.js SDK has Improper Permission Checking
Action: Upgrade auth0-js to 10.0.0 or later.
npm i auth0-js@10.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.11.0 | 10.0.0 | - |
Fixed versions
| 10.0.0 |
Sources
- osv: GHSA-8qjv-jj2q-x832
- https://github.com/auth0/auth0.js/security/advisories/GHSA-8qjv-jj2q-x832
- https://nvd.nist.gov/vuln/detail/CVE-2026-42280
- https://github.com/auth0/auth0.js
CVE-2026-42280 · published · modified · JSON