@better-auth/sso
1.7.12 · 20 Oct 2026MIT755k / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for @better-auth/sso. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 1.7.12 | Safe from 1.6.11 |
- Critical@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpointsGHSA-5rr4-8452-hf4v · 7 Jul 2026
- 1.x1.3.0 – 1.6.10Fixed in 1.6.11
- High@better-auth/sso: SSO provider may allow registration for any org member without a checking their roleGHSA-gv74-j8m3-fg5f · 20 Jul 2026
- 1.x1.3.0 – 1.6.10Fixed in 1.6.11
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.