Skip to contentBetter-auth Oauth-provider vulnerabilities
- better-auth, better-auth better auth, better-auth\/oauth-provider +2 moreBetter Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code RedemptionCVE-2026-53518Fix available7.6 High
- @better-auth oauth-provider, better-auth, better-auth better auth +1 more +3 moreBetter Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family ForkingCVE-2026-53517Fix available8.1 High
- better-auth oauth-provider@better-auth/oauth-provider before 1.7.0-beta.4 Authorization BypassCVE-2026-67332Fix available5.3 Medium
- better-auth, better-auth better-auth\/oauth-provider, oauth-provider +2 moreBetter Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clientsCVE-2026-41427Fix available7.1 High