Detected Sep 8, 2026, 9:00 PM
Significance
HighChange Type
Security Update
AI Confidence
100%
Okta released a security advisory for CVE-2026-84685 regarding the react-native-auth0 SDK. The vulnerability involves improper cache isolation in server-side rendering environments, affecting versions 5.0.0 through 5.11.0.
The react-native-auth0 SDK’s web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) environment where module state persists across HTTP requests. Customers running react-native-auth0 version 5.0.0 through 5.11.0 are affected.