{"action":"Upgrade auth0/login to 7.17.0 or later.","affected":[{"fixed":"7.17.0","introduced":"0"}],"component":"auth0/login","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.17.0"],"ghsa_id":"GHSA-9fwj-9mjf-rhj3","id":"tcs_01M5KF012CW9256XG274WWV3KK","modified_at":"2026-02-04T03:40:29.379254Z","published_at":"2025-05-17T15:07:55Z","references":["https://osv.dev/vulnerability/GHSA-9fwj-9mjf-rhj3","https://github.com/auth0/laravel-auth0/security/advisories/GHSA-9fwj-9mjf-rhj3","https://nvd.nist.gov/vuln/detail/CVE-2025-47275","https://github.com/auth0/laravel-auth0/commit/be2c59adb476c49945dcc55741a54c7a68c1741d","https://github.com/auth0/laravel-auth0","https://github.com/auth0/laravel-auth0/releases/tag/7.17.0"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-9fwj-9mjf-rhj3","url":"https://osv.dev/vulnerability/GHSA-9fwj-9mjf-rhj3"}],"summary":"laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions"}