@better-auth vulnerabilities
3 published CVEs name @better-auth among the affected products.
- Published CVEs
- 3
- Last 12 months
- 3
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2026-53517
Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking
better-auth · better-auth
High8.1 - CVE-2026-53515
Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/sso
better-auth · better-auth
High7.1 - CVE-2026-53513
Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration
better-auth · better-auth
Critical9.6