All issues

Search results

device manage removal

bugThis points to a verified bug in the codeThis points to a verified bug in the code

Status: Open.

#2861 In auth0/lock;

· smallherbo-source opened on Sep 20, 2026

[Security] High: Private options can disable OAuth state validation and enable login CSRF / session swapping

Status: Open.

#2786 In auth0/lock;

· parasol-aser opened on Apr 23, 2026