What’s Vulnerable › Products
Better-Auth/Oauth-Provider vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your Better-Auth/Oauth-Provider version is affected
Latest Better-Auth/Oauth-Provider vulnerabilities
- CVE-2026-53518 — Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption (CVSS 8.1)
- CVE-2026-53517 — Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking (CVSS 8.1)
- CVE-2026-41427 — Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clients (CVSS 6.5)