pkg:npm/auth0-js

All known vulnerabilities

• HIGH8.8CVE-2018-6874Cross-Site Request Forgery (CSRF) in Auth0
  from 0, < 9.0.0
• HIGH8.8CVE-2018-7307Auth0-js bypasses CSRF checks
  from 0, < 9.3.0
• HIGH7.5CVE-2017-17068auth0-js Privilege Escalation Vulnerability
  from 0, < 8.12.0
• HIGH7.1Auth.js SDK has Improper Permission Checking
  >= 8.11.0, < 10.0.0
• MEDIUM5.5Information disclosure through error object in auth0.js
  >= 8.0.0, < 9.13.2