Better-auth Better Auth — known CVE vulnerabilities

Every CVE whose affected-product data names Better-auth Better Auth, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-56734 — CVSS 6.1 (medium): Better Auth is an authentication library for TypeScript. An open redirect vulnerability has been identified in the verify email endpoint of…
• CVE-2025-27143 — CVSS 6.1 (medium): Better Auth is an authentication and authorization library for TypeScript. Prior to version 1.1.21, the application is vulnerable to an…