Browse CVEs

HIGH 8.1 CVE-2026-53517 Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oaut… Better Auth\/oauth Provider 1.6.11+ Fix from $1,9502026-07-15 HIGH 8.1 CVE-2026-53518 Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/toke… Better Auth\/oauth Provider 1.6.11+ Fix from $1,9502026-07-15 CRITICAL 9.6 CVE-2026-53513 Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST… Better Auth\/sso 1.6.11+ Fix from $2,3002026-07-15 CRITICAL 9.1 CVE-2026-53512 Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth toke… Better Auth 1.6.11+ Fix from $2,3002026-07-15 HIGH 8.3 CVE-2026-53516 Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAut… Better Auth 1.6.11+ Fix from $1,9502026-07-15 HIGH 7.7 CVE-2026-53514 Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtain… Better Auth 1.6.11+ Fix from $1,9502026-07-15 HIGH 7.1 CVE-2026-53515 Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/sso plugin's POST /sso/register… Better Auth\/sso 1.6.11+ Fix from $1,9502026-07-15 HIGH 7.6 CVE-2026-45337 Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authent… Better Auth 1.6.11+ Fix from $1,9502026-07-15 MEDIUM 6.5 CVE-2026-41427 Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, the clientPrivileges option documents a create action, but… Better Auth\/oauth Provider 1.6.5+ Fix from $1,6002026-04-24 MEDIUM 6.1 CVE-2025-27143 Better Auth is an authentication and authorization library for TypeScript. Prior to version 1.1.21, the application is vulnerable to an open redirect… Better Auth 1.1.21+ Fix from $1,6002025-02-24 MEDIUM 6.1 CVE-2024-56734 Better Auth is an authentication library for TypeScript. An open redirect vulnerability has been identified in the verify email endpoint of all versi… Better Auth 1.1.6+ Fix from $1,6002024-12-30