{"action":"Upgrade auth0-js to 9.13.2 or later.","affected":[{"fixed":"9.13.2","introduced":"8.0.0"}],"component":"auth0-js","cve_ids":["CVE-2020-5263"],"ecosystem":"npm","epss":0.00871,"exploited":false,"fixed_versions":["9.13.2"],"ghsa_id":"GHSA-prfq-f66g-43mp","id":"tcs_01M5KG4CX5VF3JV8A3S5ER3MWS","modified_at":"2026-07-08T06:29:39.074197287Z","published_at":"2020-04-10T18:19:10Z","references":["https://osv.dev/vulnerability/GHSA-prfq-f66g-43mp","https://github.com/auth0/auth0.js/security/advisories/GHSA-prfq-f66g-43mp","https://nvd.nist.gov/vuln/detail/CVE-2020-5263","https://github.com/auth0/auth0.js/commit/355ca749b229fb93142f0b3978399b248d710828"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-prfq-f66g-43mp","url":"https://osv.dev/vulnerability/GHSA-prfq-f66g-43mp"}],"summary":"Information disclosure through error object in auth0.js"}