CRITICAL9.6npm
GHSA-5rr4-8452-hf4v· CVE-2026-53513@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints
Modified: 7/20/2026
package
npm/@better-auth/sso
pkg:npm/%40better-auth/sso
HIGH7.1npm
GHSA-gv74-j8m3-fg5f· CVE-2026-53515@better-auth/sso: SSO provider may allow registration for any org member without a checking their role
Modified: 7/20/2026