Vulnerabilities

TI-2026-38591 CVE-2026-53517 · GHSA-392p-2q2v-4372

Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking

LOW 38

Better Auth is an authentication and authorization library for TypeScript.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00422 Published 2026-07-15 Fixed in 1.6.0, 1.6.11 CWE-362

TI-2026-38592 CVE-2026-53518 · GHSA-7w99-5wm4-3g79

LOW 35

Better Auth is an authentication and authorization library for TypeScript.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00409 Published 2026-07-15 Fixed in 1.6.11 CWE-362

TI-2026-30026 CVE-2026-41427 · GHSA-xr8f-h2gw-9xh6

LOW 31

Better Auth is an authentication and authorization library for TypeScript.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00212 Published 2026-04-24 Fixed in 1.6.5 CWE-863