{"action":"Upgrade auth0-lock to 11.26.3 or later.","affected":[{"fixed":"11.26.3","introduced":"0"}],"component":"auth0-lock","cve_ids":["CVE-2020-15119"],"ecosystem":"npm","epss":0.00546,"exploited":false,"fixed_versions":["11.26.3"],"ghsa_id":"GHSA-6gg3-pmm7-97xc","id":"tcs_01M5KF6ZKEQJM516MW4XCJYEZV","modified_at":"2026-07-08T06:29:08.829297326Z","published_at":"2020-08-19T21:05:03Z","references":["https://osv.dev/vulnerability/GHSA-6gg3-pmm7-97xc","https://github.com/auth0/lock/security/advisories/GHSA-6gg3-pmm7-97xc","https://nvd.nist.gov/vuln/detail/CVE-2020-15119","https://github.com/auth0/lock/commit/3711fb5b42afd40073a61a58759251f51e768b1b"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-6gg3-pmm7-97xc","url":"https://osv.dev/vulnerability/GHSA-6gg3-pmm7-97xc"}],"summary":"DOM-based XSS in auth0-lock"}