better-auth deviceAuthorization Session Hijack via Missing Owner Binding

github.com 2026-07-16查看中文 →

Security AdvisoryHighbetter-auth

Affected:

better-auth >= 1.6.0 and < 1.6.11

Fixed in:

1.6.11

Referenced CVEs: CVE-2026-45337 · 7.6

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Fix for AWS SDK Rust Info Leak of Authorization Header in Debug Output 2026-07-22 smithy-rs/Rust SDK Deserializer Uncontrolled Recursion DoS (CVE-2026-15967) 2026-07-22 SQL Injection in SQL Views via fields/filter parameters fix guide 2026-07-22 DHIS2 SQL View Filter SQL Injection Vulnerability (CVE-2026-5502) Advisory 2026-07-22 EOS 2.39 SQL Injection in SQL View Filter Query Fix 2026-07-22

Offline Archive

Offline screenshot & PDF are Pro-exclusive