[MEDIUM] Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter

PKSA-nrzm-zxwz-yhq9 CVE-2026-50157 GHSA-ffq7-hh2j-r24p

Affected package: auth0/symfony

Affected version: >=5.0.0-BETA0,<=5.8.0

Reported by:
GitHub