Skip to content

security audit for uuid in auth0-legacy #1335

@spdaley

Description

@spdaley

Checklist

  • I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
  • I have looked into the API documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Description

The version of uuid brought in by auth0-legacy in the v5 auth0 library is flagged by this security vulnerability GHSA-w5hq-g745-h8pq

Is there any way of rectifying that?

The auth0 v5 version was also vulnerable until recently when the uuid maintainer backported the fix to uuid v11. Though that was done with a warning as it's deprecated and won't be supported soon.

Reproduction

Run yarn audit or npm audit.

Additional context

No response

node-auth0 version

5.8.0

Node.js version

v24

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugThis points to a verified bug in the code

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions