Better-auth

    Dashboard / Vendors

    Products: 12
    Vulnerabilities: 40
    Known Exploited: 0
    5
    Critical Level Threats
    19
    High Level Threats
    8
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-121802

    Unauthenticated State Signing Allows Account Email Changes

    Last Modified: Nov 04, 2026
    Published: Nov 04, 2026

    CVE-2026-114607

    better-auth: OAuth state can be used as a Magic Link to sign in as another user

    Last Modified: Oct 23, 2026
    Published: Oct 22, 2026

    CVE-2026-110864

    Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy

    Last Modified: Oct 15, 2026
    Published: Oct 14, 2026

    CVE-2026-110863

    Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers

    Last Modified: Oct 16, 2026
    Published: Oct 14, 2026

    CVE-2026-110862

    Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link

    Last Modified: Oct 15, 2026
    Published: Oct 14, 2026
    Items Per Page