SS
Product
sso
5
CVEs
0
On KEV
9.6
Max CVSS
1
New 30D
Severity mix
Critical 1High 4Medium 0Low 0
Watch
Add sso to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53513 | 9.6 | Jul 15 | Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration Affected: >= 0.1.0, < 1.6.11 |
| CVE-2026-110863 | 8.1 | Oct 14 | Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers Affected: 1.7.0-rc.2 before 1.7.3 |
| CVE-2026-80192 | 8.1 | Aug 25 | better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass Affected: 1.4.8-beta.1 before 1.4.8; 1.4.9 before 1.6.27; 1.7.0-beta.0 before 1.7.0-rc.5 |
| CVE-2026-67328 | 8.1 | Aug 1 | @better-auth/sso before 1.6.21 Account Takeover via SSO Affected: before 1.6.21; 1.7.0-beta.0 before 1.7.0-beta.10 |
| CVE-2026-53515 | 7.1 | Jul 15 | Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/sso Affected: >= 1.2.10, < 1.6.11 |
Showing 5