- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 3 high, 1 medium
- Weekly downloads
- 3.8M
- Registry
- npm
Advisories 4
- CVE-2026-67332Medium 5.3
@better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
Affected: from 1.4.8, fixed in 1.7.0-beta.4.
- CVE-2026-53517High 8.1
Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking
Affected: from 1.6.0, fixed in 1.6.11.
- CVE-2026-53518High 7.6
Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption
Affected: from 1.6.0, fixed in 1.6.11.
- CVE-2026-41427High 7.1
Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clients
Affected: from 1.4.8-beta.7, fixed in 1.6.5; from 1.7.0-beta.0, through 1.7.0-beta.1.