All 5 CVE vulnerabilities found in better-auth, with AI-generated Chinese analysis, references, and POCs.
Vendor: better-auth
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-41427 | Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clients CWE-863 | 4.3AI | MediumAI | 2026-04-24 |
| CVE-2025-61928 | Better Auth: Unauthenticated API key creation through api-key plugin CWE-285 | 7.5AI | HighAI | 2025-10-09 |
| CVE-2025-53535 | Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes CWE-601 | 6.1AI | MediumAI | 2025-07-07 |
| CVE-2025-27143 | Beter Auth has an Open Redirect via Scheme-Less Callback Parameter CWE-601 | 6.1 | - | 2025-02-24 |
| CVE-2024-56734 | Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint CWE-601 | 6.1 | - | 2024-12-30 |
All 5 known CVE vulnerabilities affecting better-auth with full Chinese analysis, references, and POCs where available.