Auth0 / Lock

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2022-29172	HTML injection with additional signup fields	MEDIUM	6.1	May 5, 2022
CVE-2021-32641	Reflected XSS when using flashMessages	HIGH	8.1	Jun 4, 2021
CVE-2020-15119	DOM-based XSS in auth0-lock	LOW	6.4	Aug 19, 2020
CVE-2019-20174	Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder.	MEDIUM	6.1	Feb 3, 2020

Rows per page

Showing 1 to 4 of 4 CVEs