BE
Product
better-auth
30
CVEs
0
On KEV
9.6
Max CVSS
5
New 30D
Severity mix
Critical 5High 14Medium 7Low 4
Watch
Add better-auth to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67334 | 3.8 | Aug 1 | better-auth Stale Sessions Persist After User Deletion Affected: 0.3.4 before 1.6.11; 1.6.0 before 1.6.11 |
| CVE-2026-110861 | 3.7 | Oct 14 | Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition Affected: 1.6.17 before 1.7.7 |
| CVE-2025-53535 | 2.1 | Jul 7 | Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes Affected: < 1.2.10 |
| CVE-2025-71402 | 2.0 | Aug 1 | better-auth before 1.4.0 Session Revocation via Forged Cookie Affected: before 1.4.0 |
Showing 4