An open index of dependabot pull requests across open source projects.

better-auth

Ecosystem:
npm
Package URL:
pkg:npm/better-auth
Total PRs:
588 Dependabot PRs
Latest PR:
about 3 hours ago
Unique Repositories:
174 repositories
Unique Repos (30 days):
70 repositories
Security Advisories
Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
GHSA-36rg-gfq2-3h56 CVE-2025-53535 LOW published 2 months ago • updated 22 days ago
### Summary An open redirect has been found in the `originCheck` middleware function, which affects the following routes: `/verify-email`, `/reset...
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
GHSA-hjpm-7mrm-26w8 CVE-2025-27143 MODERATE published 7 months ago • updated about 1 month ago
### Summary The application is vulnerable to an open redirect due to improper validation of the callbackURL parameter in the email verification end...
Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
GHSA-8jhw-6pjj-8723 CVE-2024-56734 HIGH published 8 months ago • updated about 1 month ago
## Summary An **open redirect vulnerability** has been identified in the **verify email endpoint** of Better Auth, potentially allowing attackers t...
Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)
GHSA-9x4v-xfq5-m8x5 CRITICAL published 7 months ago • updated 3 months ago
### Summary The better-auth `/api/auth/error` page was vulnerable to HTML injection, resulting in a reflected cross-site scripting (XSS) vulnerabil...
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
GHSA-vp58-j275-797x CRITICAL published 7 months ago • updated 3 months ago
### Summary A bypass was found for **wildcard** or **absolute URLs** trustedOrigins configurations and opens the victims website to a **Open Redire...
Recent PRs
Package Details
Name: better-auth
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/better-auth
JSON API: View JSON
Security Advisories

5

Active advisories
CRITICAL 2
HIGH 1
MODERATE 1
LOW 1
View All npm Advisories
Package Information
Description:

The most comprehensive authentication library for TypeScript.

Repository: https://github.com/better-auth/better-auth
Homepage: https://github.com/better-auth/better-auth#readme
Latest Release: 1.2.8
4 months ago
Dependent Repos: 0
Dependent Packages: 0
Downloads: 422,738
Ranking: Top 30.4529% by dependent repos Top 43.5938% by dependent pkgs
PR Status
Open 326 (55.8%)
Merged 49 (8.4%)
Closed 150 (25.7%)
PR Types
Minor 254 (43.5%)
Major 3 (0.5%)
Patch 267 (45.7%)