LOW3.8npm
GHSA-2vg6-77g8-24mp· CVE-2026-67334Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows
Modified: 9/10/2026
package
npm/@better-auth/scim
pkg:npm/%40better-auth/scim
HIGH8.3npm
GHSA-j8v8-g9cx-5qf4· CVE-2026-67331@better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers
Modified: 9/10/2026
CRITICAL9.9npm
GHSA-rjg6-39jm-rgg4@better-auth/scim: account takeover and stale access via SCIM provider-id collision
Modified: 7/24/2026