[MEDIUM] Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter

PKSA-nrzm-zxwz-yhq9 CVE-2026-50157 GHSA-ffq7-hh2j-r24p

Affected version: >=5.0.0-BETA0,<=5.8.0

Reported by:
GitHub

[HIGH] Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption

PKSA-kmxg-njz7-dx5f GHSA-ghc5-95c2-vwcv

Affected version: >=5.0.0,<=5.7.0

Reported by:
GitHub