better-auth

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

better-auth records in CISA KEV

No better-auth vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Better-auth/oauth-provider · all components

TI-2026-38591 CVE-2026-53517 · GHSA-392p-2q2v-4372

LOW 38

Better Auth is an authentication and authorization library for TypeScript.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00422 Published 2026-07-15 Fixed in 1.6.0, 1.6.11 CWE-362

TI-2026-38592 CVE-2026-53518 · GHSA-7w99-5wm4-3g79

LOW 35

Better Auth is an authentication and authorization library for TypeScript.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00409 Published 2026-07-15 Fixed in 1.6.11 CWE-362

TI-2026-30026 CVE-2026-41427 · GHSA-xr8f-h2gw-9xh6

LOW 31

Better Auth is an authentication and authorization library for TypeScript.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00212 Published 2026-04-24 Fixed in 1.6.5 CWE-863