Vulnerabilities in better-auth

40 results
CVE-2026-110862CRITICALBetter Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic LinkEPSS 0.3%CVE-2026-67329HIGH@better-auth/stripe before 1.6.21 Authorization Bypass via Organization SubscriptionEPSS 0.3%CVE-2026-45364HIGHBetter Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotationEPSS 0.3%CVE-2026-53516HIGHBetter Auth: Account takeover via OAuth auto-link to unverified pre-registered emailEPSS 0.3%CVE-2026-110864CRITICALBetter Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth ProxyEPSS 0.3%CVE-2026-67335MEDIUMbetter-auth before 1.6.2 OAuth State Validation BypassEPSS 0.3%CVE-2026-109346HIGHbetter-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /deviceEPSS 0.3%CVE-2026-53512CRITICALBetter Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp pluginsEPSS 0.3%CVE-2026-110863HIGHBetter Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO ProvidersEPSS 0.3%CVE-2025-71402LOWbetter-auth before 1.4.0 Session Revocation via Forged CookieEPSS 0.3%CVE-2026-67333MEDIUMbetter-auth before 1.6.13 Stored XSS via javascript redirect_uriEPSS 0.3%CVE-2026-67332MEDIUM@better-auth/oauth-provider before 1.7.0-beta.4 Authorization BypassEPSS 0.3%CVE-2026-53513CRITICALBetter Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationEPSS 0.2%CVE-2026-67336CRITICALbetter-auth before 1.6.11 Insecure Cryptographic Defaults via oidcProviderEPSS 0.2%CVE-2026-110861MEDIUMBetter Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race ConditionEPSS 0.2%CVE-2026-45337HIGHBetter Auth: Device authorization approve and deny accept any authenticated session while the user code is pendingEPSS 0.2%CVE-2026-41427HIGHBetter Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clientsEPSS 0.2%CVE-2026-121802CRITICAL@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), becEPSS 0.2%CVE-2026-53514HIGHBetter Auth: Unauthorized invitation acceptance via unverified email match in organization pluginEPSS 0.2%CVE-2026-15527MEDIUMbetter-auth better-icons scan_project_icons/sync_icon path traversalEPSS 0.2%