CVE-2026-123010

The @twilio-labs/netlify-okta-auth library (versions through 1.0.2 ) is vulnerable because it relies on an unverified iss claim . This flaw impacts an outbound HTTP request used to retrieve a public signing key. Additionally, there may be further impacts if the oktaUrl is left unset due to miscon...