better-auth Summary
Latest vulnerabilities published by better-auth
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Denial of Service in Better-Auth NPM Package by Better-Auth
CVE-2025-71401Better-authBetter-auth9.3CRITICALInsecure Direct Object Reference in Better-Auth Passkey Deletion Endpoint
CVE-2025-71400Better-authPasskey7.1HIGHPath Normalization Bypass in Better Auth by Better-Call
CVE-2025-71399Better-authBetter-auth8.8HIGHInsecure Cryptographic Defaults in better-auth Product by Better-Auth
CVE-2026-67336Better-authBetter-auth9.4CRITICALStored XSS Vulnerability in Better-Auth OAuth Client
CVE-2026-67333Better-authBetter-auth5.1MEDIUMAuthorization Bypass in Better Auth Stripe Integration Affects Multiple Organizations
CVE-2026-67329Better-authStripe7.1HIGHSession Management Flaw in Better-Auth Affects User Deletion Process
CVE-2026-67334Better-authBetter-auth5.1MEDIUMOpen Redirect Vulnerability in better-auth Affects Trust Validation Logic
CVE-2025-71403Better-authBetter-auth7.1HIGHAuthorization Bypass in OAuth Provider by Better Auth
CVE-2026-67332Better-authOauth-provider5.3MEDIUMTwo-Factor Authentication Bypass in Better-Auth Plugin by Better-Auth
CVE-2026-67337Better-authBetter-auth7.1HIGHAuthentication Bypass Vulnerabilities in @better-auth/sso from BetterAuth
CVE-2026-67328Better-authSso8.6HIGHReflected XSS Vulnerability in Better-Auth Product by Better-Auth
CVE-2025-71404Better-authBetter-auth5.1MEDIUMAccount Takeover Vulnerability in Better-Auth Product by Better-Auth Vendor
CVE-2026-67327Better-authBetter-auth8.7HIGHAuthorization Bypass in better-auth SCIM Affects User Management
CVE-2026-67331Better-authScim8.7HIGHOAuth State Validation Bypass in better-auth by Better Auth
CVE-2026-67335Better-authBetter-auth6MEDIUMAuthorization Bypass in Better-Auth Plugin for SCIM by Better-Auth
CVE-2026-67330Better-authScim9.4CRITICALSession Management Flaw in Better-Auth Plugin by Better-Auth
CVE-2025-71402Better-authBetter-auth2LOWAuthorization Library Vulnerability in Better Auth for TypeScript
CVE-2026-53517Better-authBetter-auth8.1HIGHAuthentication and Authorization Vulnerability in Better Auth Library by Better Auth
CVE-2026-45337Better-authBetter-auth7.6HIGHAuthorization Issues in Better Auth Library Affecting TypeScript Implementations
CVE-2026-53514Better-authBetter-auth7.7HIGHAuthentication Bypass in Better Auth for TypeScript
CVE-2026-53515Better-authBetter-auth7.1HIGHAuthorization Flaw in Better Auth Authentication Library for TypeScript
CVE-2026-53512Better-authBetter-auth9.1CRITICALAuthentication and Authorization Library Vulnerability for TypeScript by Better Auth
CVE-2026-53518Better-authBetter-auth7.6HIGHSecurity Flaw in Better Auth's Authentication Library for TypeScript
CVE-2026-53513Better-authBetter-auth9.6CRITICALAuthentication and Authorization Library Vulnerability in Better Auth
CVE-2026-53516Better-authBetter-auth8.3HIGH