CyberRota Analysis
AI-GeneratedThe react-native-auth0 SDK's web platform implementation is vulnerable due to its failure to isolate in-memory token caches for individual user sessions in server-side rendering environments, allowing cached tokens to be accessed across multiple HTTP requests. This could lead to unauthorized access to user sessions if an attacker exploits the token leakage. Organizations utilizing this SDK in SSR contexts should prioritize remediation to protect user data and session integrity.
Original NVD Description
The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory can be retrieved across subsequent requests processed by the same server runtime.