VYPR

Auth0 ASP.NET Core Authentication SDK

by Okta

CVEs (1)

  • CVE-2026-126129Nov 10, 2026
    risk 0.00cvss —epss —

    The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints.