All products

@better-auth/sso

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@better-auth/sso: SSO provider may allow registration for any org member without a checking their roleCVE-2026-53515 · GHSA-GV74-J8M3-FG5F @better-auth/sso npm High Fix reported
@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpointsCVE-2026-53513 · GHSA-5RR4-8452-HF4V @better-auth/sso npm Critical Fix reported