EUVD-2025-13289

Malicious code in bioql PyPI...

CVE-2025-46345

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue...

CVE-2025-46345 Auth0 Account Link Extension JWT Invalid Signature Validation

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue...

CVE-2025-46345 Auth0 Account Link Extension JWT Invalid Signature Validation

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue...

CVE-2025-46345 Auth0 Account Link Extension JWT Invalid Signature Validation

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue...

CVE-2025-46345

The CVE-2025-46345 entry concerns the Auth0 Account Link Extension. Versions 2.3.4–2.6.6 do not verify the JWT signature, allowing an attacker to present a forged token and potentially access user data without authorization. The issue is remedied in 2.6.7, 2.7.0, and 3.0.0, with a recommendation ...

PT-2025-18681 · Auth0 · Auth0 Account Link Extension

Name of the Vulnerable Software and Affected Versions: Auth0 Account Link Extension versions 2.3.4 through 2.6.6 Description: The issue allows users to supply a forged token, potentially accessing user information without proper authorization, due to the lack of verification of the signature of t...

Auth0 Account Link Extension 安全漏洞

Auth0 Account Link Extension is an open source extension from Auth0 Extensions designed to help easily link accounts. A security vulnerability exists in Auth0 Account Link Extension versions 2.3.4 through 2.6.6, which stems from an unvalidated JWT signature and could lead to unauthorized access t...