CVE-2026-50157
1 advisory.
Packagist/auth0/symfony CVE-2026-50157: medium 6.5, EPSS 0.51%
Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter
Action: Upgrade auth0/symfony to 5.9.0 or later.
composer require auth0/symfony:5.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0-BETA0 | 5.9.0 | - |
Fixed versions
| 5.9.0 |
Sources
- osv: GHSA-ffq7-hh2j-r24p
- https://github.com/auth0/symfony/security/advisories/GHSA-ffq7-hh2j-r24p
- https://github.com/auth0/symfony/commit/172d1d3e0b9d1e93610d786118389a811179bc8a
- https://github.com/auth0/symfony/commit/bd1851b14ae15e99cbe87c96496cf25da025288a
- https://github.com/auth0/symfony
- https://github.com/auth0/symfony/releases/tag/5.9.0
CVE-2026-50157 · published · modified · JSON