@better-auth/scim
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @better-auth/scim: account takeover and stale access via SCIM provider-id collision | @better-auth/scim | npm | Critical | Fix reported | |
| Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows | @better-auth/scimbetter-auth | npm | Low | Fix reported | |
| @better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers | @better-auth/scim | npm | High | Fix reported |