Better-Auth Better Auth
1 CVEs affecting Better-Auth Better Auth. Latest disclosed: 2026-11-04. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-121802 | Critical | 9.1 | 2026-11-04 | @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a cal… |