{"action":"Upgrade auth0/login to 7.21.0 or later.","affected":[{"fixed":"7.21.0","introduced":"7.0.0"}],"component":"auth0/login","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.21.0"],"ghsa_id":"GHSA-fmg6-246m-9g2v","id":"tcs_01M5KF1X80VCFR7ZVP0FYH5SFH","modified_at":"2026-04-03T03:47:33.137524Z","published_at":"2026-04-03T03:41:04Z","references":["https://osv.dev/vulnerability/GHSA-fmg6-246m-9g2v","https://github.com/auth0/laravel-auth0/security/advisories/GHSA-fmg6-246m-9g2v","https://github.com/auth0/laravel-auth0"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-fmg6-246m-9g2v","url":"https://osv.dev/vulnerability/GHSA-fmg6-246m-9g2v"}],"summary":"Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption"}