Executive brief
Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability
Affected products
- Packagist auth0/symfony
Junglewise Threat Intelligence
Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability
Severity: medium · CVSS 4 · Published 2025-06-06
Technologies: auth0/symfony (Packagist). Vendors: Packagist.
Related threats
- Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate() an
- Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption
- Auth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK
- Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import
- Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions