Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-42280

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.5%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2026-42280
  • Auth0 » Auth0.js » Version: 8.11.0
    cpe:2.3:a:auth0:auth0.js:8.11.0
  • Auth0 » Auth0.js » Version: 8.11.1
    cpe:2.3:a:auth0:auth0.js:8.11.1
  • Auth0 » Auth0.js » Version: 8.11.2
    cpe:2.3:a:auth0:auth0.js:8.11.2
  • Auth0 » Auth0.js » Version: 8.11.3
    cpe:2.3:a:auth0:auth0.js:8.11.3
  • Auth0 » Auth0.js » Version: 8.12.0
    cpe:2.3:a:auth0:auth0.js:8.12.0
  • Auth0 » Auth0.js » Version: 8.12.1
    cpe:2.3:a:auth0:auth0.js:8.12.1
  • Auth0 » Auth0.js » Version: 8.12.2
    cpe:2.3:a:auth0:auth0.js:8.12.2
  • Auth0 » Auth0.js » Version: 8.12.3
    cpe:2.3:a:auth0:auth0.js:8.12.3
  • Auth0 » Auth0.js » Version: 9.0.1
    cpe:2.3:a:auth0:auth0.js:9.0.1
  • Auth0 » Auth0.js » Version: 9.0.2
    cpe:2.3:a:auth0:auth0.js:9.0.2
  • Auth0 » Auth0.js » Version: 9.0.3
    cpe:2.3:a:auth0:auth0.js:9.0.3
  • Auth0 » Auth0.js » Version: 9.1.0
    cpe:2.3:a:auth0:auth0.js:9.1.0
  • Auth0 » Auth0.js » Version: 9.1.1
    cpe:2.3:a:auth0:auth0.js:9.1.1
  • Auth0 » Auth0.js » Version: 9.1.2
    cpe:2.3:a:auth0:auth0.js:9.1.2
  • Auth0 » Auth0.js » Version: 9.1.3
    cpe:2.3:a:auth0:auth0.js:9.1.3
  • Auth0 » Auth0.js » Version: 9.10.0
    cpe:2.3:a:auth0:auth0.js:9.10.0
  • Auth0 » Auth0.js » Version: 9.10.1
    cpe:2.3:a:auth0:auth0.js:9.10.1
  • Auth0 » Auth0.js » Version: 9.10.2
    cpe:2.3:a:auth0:auth0.js:9.10.2
  • Auth0 » Auth0.js » Version: 9.10.3
    cpe:2.3:a:auth0:auth0.js:9.10.3
  • Auth0 » Auth0.js » Version: 9.10.4
    cpe:2.3:a:auth0:auth0.js:9.10.4
  • Auth0 » Auth0.js » Version: 9.11.0
    cpe:2.3:a:auth0:auth0.js:9.11.0
  • Auth0 » Auth0.js » Version: 9.11.1
    cpe:2.3:a:auth0:auth0.js:9.11.1
  • Auth0 » Auth0.js » Version: 9.11.2
    cpe:2.3:a:auth0:auth0.js:9.11.2
  • Auth0 » Auth0.js » Version: 9.11.3
    cpe:2.3:a:auth0:auth0.js:9.11.3
  • Auth0 » Auth0.js » Version: 9.12.0
    cpe:2.3:a:auth0:auth0.js:9.12.0
  • Auth0 » Auth0.js » Version: 9.12.1
    cpe:2.3:a:auth0:auth0.js:9.12.1
  • Auth0 » Auth0.js » Version: 9.12.2
    cpe:2.3:a:auth0:auth0.js:9.12.2
  • Auth0 » Auth0.js » Version: 9.13.0
    cpe:2.3:a:auth0:auth0.js:9.13.0
  • Auth0 » Auth0.js » Version: 9.13.1
    cpe:2.3:a:auth0:auth0.js:9.13.1
  • Auth0 » Auth0.js » Version: 9.13.2
    cpe:2.3:a:auth0:auth0.js:9.13.2
  • Auth0 » Auth0.js » Version: 9.13.3
    cpe:2.3:a:auth0:auth0.js:9.13.3
  • Auth0 » Auth0.js » Version: 9.13.4
    cpe:2.3:a:auth0:auth0.js:9.13.4
  • Auth0 » Auth0.js » Version: 9.14.0
    cpe:2.3:a:auth0:auth0.js:9.14.0
  • Auth0 » Auth0.js » Version: 9.14.1
    cpe:2.3:a:auth0:auth0.js:9.14.1
  • Auth0 » Auth0.js » Version: 9.14.2
    cpe:2.3:a:auth0:auth0.js:9.14.2
  • Auth0 » Auth0.js » Version: 9.14.3
    cpe:2.3:a:auth0:auth0.js:9.14.3
  • Auth0 » Auth0.js » Version: 9.15.0
    cpe:2.3:a:auth0:auth0.js:9.15.0
  • Auth0 » Auth0.js » Version: 9.16.0
    cpe:2.3:a:auth0:auth0.js:9.16.0
  • Auth0 » Auth0.js » Version: 9.16.1
    cpe:2.3:a:auth0:auth0.js:9.16.1
  • Auth0 » Auth0.js » Version: 9.16.2
    cpe:2.3:a:auth0:auth0.js:9.16.2
  • Auth0 » Auth0.js » Version: 9.16.3
    cpe:2.3:a:auth0:auth0.js:9.16.3
  • Auth0 » Auth0.js » Version: 9.16.4
    cpe:2.3:a:auth0:auth0.js:9.16.4
  • Auth0 » Auth0.js » Version: 9.17.0
    cpe:2.3:a:auth0:auth0.js:9.17.0
  • Auth0 » Auth0.js » Version: 9.18.0
    cpe:2.3:a:auth0:auth0.js:9.18.0
  • Auth0 » Auth0.js » Version: 9.18.1
    cpe:2.3:a:auth0:auth0.js:9.18.1
  • Auth0 » Auth0.js » Version: 9.19.0
    cpe:2.3:a:auth0:auth0.js:9.19.0
  • Auth0 » Auth0.js » Version: 9.19.1
    cpe:2.3:a:auth0:auth0.js:9.19.1
  • Auth0 » Auth0.js » Version: 9.19.2
    cpe:2.3:a:auth0:auth0.js:9.19.2
  • Auth0 » Auth0.js » Version: 9.2.0
    cpe:2.3:a:auth0:auth0.js:9.2.0
  • Auth0 » Auth0.js » Version: 9.2.1
    cpe:2.3:a:auth0:auth0.js:9.2.1
  • Auth0 » Auth0.js » Version: 9.2.2
    cpe:2.3:a:auth0:auth0.js:9.2.2
  • Auth0 » Auth0.js » Version: 9.2.3
    cpe:2.3:a:auth0:auth0.js:9.2.3
  • Auth0 » Auth0.js » Version: 9.20.0
    cpe:2.3:a:auth0:auth0.js:9.20.0
  • Auth0 » Auth0.js » Version: 9.20.1
    cpe:2.3:a:auth0:auth0.js:9.20.1
  • Auth0 » Auth0.js » Version: 9.20.2
    cpe:2.3:a:auth0:auth0.js:9.20.2
  • Auth0 » Auth0.js » Version: 9.21.0
    cpe:2.3:a:auth0:auth0.js:9.21.0
  • Auth0 » Auth0.js » Version: 9.22.0
    cpe:2.3:a:auth0:auth0.js:9.22.0
  • Auth0 » Auth0.js » Version: 9.22.1
    cpe:2.3:a:auth0:auth0.js:9.22.1
  • Auth0 » Auth0.js » Version: 9.23.0
    cpe:2.3:a:auth0:auth0.js:9.23.0
  • Auth0 » Auth0.js » Version: 9.23.1
    cpe:2.3:a:auth0:auth0.js:9.23.1
  • Auth0 » Auth0.js » Version: 9.23.2
    cpe:2.3:a:auth0:auth0.js:9.23.2
  • Auth0 » Auth0.js » Version: 9.23.3
    cpe:2.3:a:auth0:auth0.js:9.23.3
  • Auth0 » Auth0.js » Version: 9.24.0
    cpe:2.3:a:auth0:auth0.js:9.24.0
  • Auth0 » Auth0.js » Version: 9.24.1
    cpe:2.3:a:auth0:auth0.js:9.24.1
  • Auth0 » Auth0.js » Version: 9.25.0
    cpe:2.3:a:auth0:auth0.js:9.25.0
  • Auth0 » Auth0.js » Version: 9.26.0
    cpe:2.3:a:auth0:auth0.js:9.26.0
  • Auth0 » Auth0.js » Version: 9.26.1
    cpe:2.3:a:auth0:auth0.js:9.26.1
  • Auth0 » Auth0.js » Version: 9.27.0
    cpe:2.3:a:auth0:auth0.js:9.27.0
  • Auth0 » Auth0.js » Version: 9.28.0
    cpe:2.3:a:auth0:auth0.js:9.28.0
  • Auth0 » Auth0.js » Version: 9.29.0
    cpe:2.3:a:auth0:auth0.js:9.29.0
  • Auth0 » Auth0.js » Version: 9.29.1
    cpe:2.3:a:auth0:auth0.js:9.29.1
  • Auth0 » Auth0.js » Version: 9.3
    cpe:2.3:a:auth0:auth0.js:9.3
  • Auth0 » Auth0.js » Version: 9.3.0
    cpe:2.3:a:auth0:auth0.js:9.3.0
  • Auth0 » Auth0.js » Version: 9.3.1
    cpe:2.3:a:auth0:auth0.js:9.3.1
  • Auth0 » Auth0.js » Version: 9.3.2
    cpe:2.3:a:auth0:auth0.js:9.3.2
  • Auth0 » Auth0.js » Version: 9.3.3
    cpe:2.3:a:auth0:auth0.js:9.3.3
  • Auth0 » Auth0.js » Version: 9.3.4
    cpe:2.3:a:auth0:auth0.js:9.3.4
  • Auth0 » Auth0.js » Version: 9.30.0
    cpe:2.3:a:auth0:auth0.js:9.30.0
  • Auth0 » Auth0.js » Version: 9.30.1
    cpe:2.3:a:auth0:auth0.js:9.30.1
  • Auth0 » Auth0.js » Version: 9.31.0
    cpe:2.3:a:auth0:auth0.js:9.31.0
  • Auth0 » Auth0.js » Version: 9.32.0
    cpe:2.3:a:auth0:auth0.js:9.32.0
  • Auth0 » Auth0.js » Version: 9.4.0
    cpe:2.3:a:auth0:auth0.js:9.4.0
  • Auth0 » Auth0.js » Version: 9.4.1
    cpe:2.3:a:auth0:auth0.js:9.4.1
  • Auth0 » Auth0.js » Version: 9.4.2
    cpe:2.3:a:auth0:auth0.js:9.4.2
  • Auth0 » Auth0.js » Version: 9.5.0
    cpe:2.3:a:auth0:auth0.js:9.5.0
  • Auth0 » Auth0.js » Version: 9.5.1
    cpe:2.3:a:auth0:auth0.js:9.5.1
  • Auth0 » Auth0.js » Version: 9.6.0
    cpe:2.3:a:auth0:auth0.js:9.6.0
  • Auth0 » Auth0.js » Version: 9.6.1
    cpe:2.3:a:auth0:auth0.js:9.6.1
  • Auth0 » Auth0.js » Version: 9.7.0
    cpe:2.3:a:auth0:auth0.js:9.7.0
  • Auth0 » Auth0.js » Version: 9.7.1
    cpe:2.3:a:auth0:auth0.js:9.7.1
  • Auth0 » Auth0.js » Version: 9.7.2
    cpe:2.3:a:auth0:auth0.js:9.7.2
  • Auth0 » Auth0.js » Version: 9.7.3
    cpe:2.3:a:auth0:auth0.js:9.7.3
  • Auth0 » Auth0.js » Version: 9.7.4
    cpe:2.3:a:auth0:auth0.js:9.7.4
  • Auth0 » Auth0.js » Version: 9.8.0
    cpe:2.3:a:auth0:auth0.js:9.8.0
  • Auth0 » Auth0.js » Version: 9.8.1
    cpe:2.3:a:auth0:auth0.js:9.8.1
  • Auth0 » Auth0.js » Version: 9.8.2
    cpe:2.3:a:auth0:auth0.js:9.8.2
  • Auth0 » Auth0.js » Version: 9.9.0
    cpe:2.3:a:auth0:auth0.js:9.9.0
  • Auth0 » Auth0.js » Version: 9.9.1
    cpe:2.3:a:auth0:auth0.js:9.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved