Executive brief
Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption
Affected products
- Packagist auth0/login
Junglewise Threat Intelligence
Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption
Severity: low · CVSS 3.1 · Published 2026-04-03
Technologies: auth0/login (Packagist). Vendors: Packagist.
Related threats
- Auth0 Laravel SDK has Improper Audience Validation via Auth0-PHP SDK dependency
- laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
- laravel-auth0 SDK Deserialization of Untrusted Data vulnerability
- laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions