Filtered by vendor Twilio-labs Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123010 1 Twilio-labs 1 Netlify-okta-auth 2026-11-07 7.2 High
@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set.