[CRITICAL] Forgeable Encrypted Session Cookie in Apps Using Auth0-PHP SDK

PKSA-w6j7-c1kq-w6yb CVE-2025-47275 GHSA-g98g-r7gf-2r25

Affected package: auth0/auth0-php

Affected version: >=8.0.0-BETA1,<8.14.0

Reported by:
GitHub