Login Request a demo
OA
Product
oauth-provider
by better-auth · last CVE Aug 1, 2026
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add oauth-provider to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53517
8.1
0%
Jul 15
Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking
Affected: >= 1.6.0, < 1.6.11
CVE-2026-41427
6.5
0%
Apr 24
Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clients
Affected: >= 1.4.8-beta.7, < 1.6.5; >= 1.7.0-beta.0, <= 1.7.0-beta.1
CVE-2026-67332
6.4
0%
Aug 1
@better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
Affected: 1.4.8 before 1.7.0-beta.4
Showing 3