Known Vulnerabilities for Oauth-provider by @better-auth
Listed below are 10 of the newest known vulnerabilities associated with "Oauth-provider" by "@better-auth".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73419 json | NextAuth.js provides authentication for Next.js. Prior to@auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, Auth.js s... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-73079 json | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.13... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-70482 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OA... | Not Provided | 2026-08-04 | 2026-08-06 |
| CVE-2026-70478 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v1/oau... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-67333 json | better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redirect_... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-67332 json | @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clie... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-67330 json | @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-bet... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-65655 json | When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Tempo... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-64665 json | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabl... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-59801 json | 9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with... | Not Provided | 2026-07-13 | 2026-07-14 |