Skip to content
OpenAdvisories

Product · better-auth

oauth-provider

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-67332

    @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass

    @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets re…

    better-auth oauth-provider @better-auth/oauth-provider npm