@better-auth/scim
1.7.12 · 20 Oct 2026MIT184.9k / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for @better-auth/scim. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 1.7.12 | Safe from 1.7.0 |
- Critical@better-auth/scim: account takeover and stale access via SCIM provider-id collisionGHSA-rjg6-39jm-rgg4 · 24 Jul 2026
- 1.x1.4.0 – 1.6.21Fixed in 1.6.22
- High@better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providersGHSA-j8v8-g9cx-5qf4 · 7 Jul 2026
- 1.x1.5.0 – 1.6.33Fixed in 1.7.0
- LowBetter Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flowsGHSA-2vg6-77g8-24mp · 7 Jul 2026
- 1.x1.6.0 – 1.6.10Fixed in 1.6.11
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.