Auth0 lock

• CVE-2022-29172 Medium 6.1 HTML injection with additional signup fields 0.6%
• CVE-2021-32641 High 8.1 Reflected XSS when using flashMessages 1.5%
• CVE-2020-15119 Medium 6.4 DOM-based XSS in auth0-lock 0.5%