`better-auth`

Ecosystem:
npm

Package URL:
pkg:npm/better-auth

Total PRs:
2,498 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
876 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

Beter Auth has an Open Redirect via Scheme-Less Callback Parameter

GHSA-hjpm-7mrm-26w8 CVE-2025-27143 MODERATE published over 1 year ago • updated 3 days ago

### Summary The application is vulnerable to an open redirect due to improper validation of the callbackURL parameter in the email verification end...

Better Auth affected by external request basePath modification DoS

GHSA-569q-mpph-wgww LOW published 8 months ago • updated 3 days ago

# Summary Affected versions of Better Auth allow an external request to configure `baseURL` when it isn’t defined through any other means. This ca...

Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows

GHSA-2vg6-77g8-24mp LOW published 23 days ago • updated 5 days ago

### Am I affected? Users are affected if all of the following are true: - They configure `secondaryStorage` on `betterAuth(...)` (Redis, KV, or a...

Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption

GHSA-392p-2q2v-4372 CVE-2026-53517 HIGH published 23 days ago • updated 5 days ago

### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth-provider` at a version `>=...

Better Auth allows bypassing the trustedOrigins Protection which leads to ATO

GHSA-vp58-j275-797x HIGH published over 1 year ago • updated 3 days ago

### Summary A bypass was discovered in the trustedOrigins validation logic—affecting both absolute URL entries and wildcard domain patterns. This ...

View all 22 advisories

Recent PRs

RSS Feed

chore(deps)(deps): bump better-auth from 1.6.18 to 1.6.22

aloewright/my-cf-template #67

1.6.18 → 1.6.22 Patch PR

Open 2 days ago 1 comment

chore(deps): bump better-auth from 1.6.18 to 1.6.22

tkstang/sequence #11

1.6.18 → 1.6.22 Patch PR

Open 2 days ago 1 comment

chore(deps): bump the awesome-dependencies group across 1 directory with 30 updates

koralle/pantry #131

1.6.19 → 1.6.25 Patch PR

Closed 4 days ago 1 comment

Bump the production-minor-patch group across 1 directory with 25 updates

hbmartin/raffy-research #57

1.6.20 → 1.6.23 Patch PR

Open 10 days ago 3 comments

chore(deps): bump the npm-minor-patch group across 1 directory with 17 updates

zwenger/better-prode #32

1.6.20 → 1.6.23 Patch PR

Closed 14 days ago 2 comments

build(deps): bump the npm-production group across 1 directory with 30 updates

interdomestik/interdomestik #1342

1.6.22 → 1.6.23 Patch PR

Open 17 days ago 2 comments

Bump the production-minor-patch group across 1 directory with 23 updates

hbmartin/raffy-research #54

1.6.20 → 1.6.23 Patch PR

Open 17 days ago 3 comments

chore(deps): bump better-auth from 1.6.10 to 1.6.13

JeromyJSmith/lattice-platform #407

1.6.10 → 1.6.13 Patch PR

Open 20 days ago 1 comment

chore(deps): bump better-auth from 1.6.11 to 1.6.13 in the npm_and_yarn group across 1 directory

better-invite/better-invite #59

1.6.11 → 1.6.13 Patch PR

Open 20 days ago 2 comments

chore(deps): bump better-auth from 1.6.5 to 1.6.13

heysagnik/fhoto-space #8

1.6.5 → 1.6.13 Patch PR

Closed 20 days ago 1 comment

Node (Frontend)(deps): Update better-auth requirement from ^1.6.20 to ^1.6.23 in /src/Clients in the better-auth group

foxminchan/BookWorm #1319

^1.6.20 → ^1.6.23 Patch PR

Open 27 days ago 3 comments

deps(npm): bump the ui-dependencies group across 1 directory with 10 updates

NinePiece2/Merlins-Crystal-Ball #113

1.6.19 → 1.6.23 Patch PR

Closed 28 days ago 3 comments

chore(deps): bump better-auth from 1.6.9 to 1.6.23

denis-jasselette/betterclimber #164

1.6.9 → 1.6.23 Patch PR

Open 28 days ago 2 comments

chore(deps)(deps): bump the minor-and-patch group with 29 updates

TriplEight/TaxHacker #24

1.4.5 → 1.6.20 Minor PR

Open 29 days ago 2 comments

build(deps): bump the dependencies group across 1 directory with 23 updates

silvertakana/worldwideview #288

1.6.22 → 1.6.23 Patch PR

Closed 29 days ago 2 comments

build(deps): bump the dependencies group with 4 updates

OpenUp-LabTakizawa/robopo #556

1.6.22 → 1.6.23 Patch PR

Open about 1 month ago 2 comments

chore(deps)(deps): bump the production-dependencies group with 16 updates

objectstack-ai/framework #2441

1.6.20 → 1.6.22 Patch PR

Open about 1 month ago 2 comments

build(deps): bump the dependencies group with 2 updates

OpenUp-LabTakizawa/dcrs #1553

1.6.21 → 1.6.22 Patch PR

Open about 1 month ago 4 comments

chore: bump the dependencies group with 61 updates

corsairdev/corsair #302

1.6.15 → 1.6.20 Patch PR

Open about 1 month ago 9 comments

chore(deps): Bump better-auth from 1.6.11 to 1.6.20

rafters-studio/better-auth-paseto #35

1.6.11 → 1.6.20 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump better-auth from 1.6.19 to 1.6.20

hendripermana/permoney #123

1.6.19 → 1.6.20 Patch PR

Closed about 1 month ago 4 comments

feat(deps): bump the prod-dependencies group across 1 directory with 7 updates

trystan2k/favoritable #24

1.6.18 → 1.6.19 Patch PR

Closed about 1 month ago 1 comment

build: Bump the dependencies group across 3 directories with 21 updates

ost-fh/typstogether #148

1.6.11 → 1.6.18 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump the npm-prod-patch group across 1 directory with 24 updates

Larrybin/aooi #179

1.6.15 → 1.6.20 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the minor-and-patch group with 27 updates

denizlg24/denizlg24.com #12

1.6.18 → 1.6.20 Patch PR

Open about 1 month ago 4 comments

build(deps): bump the production-dependencies group with 71 updates

Rionna-Ireland/rionna-ireland-app #29

1.5.6 → 1.6.19 Minor PR

Closed about 1 month ago 7 comments

Bump better-auth from 1.6.18 to 1.6.19

xataio/learn-postgres #69

1.6.18 → 1.6.19 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the production-patches group across 1 directory with 34 updates

marcolino3/restart #62

1.6.11 → 1.6.18 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the all-minor-patch group across 1 directory with 13 updates

Divkix/clickfolio.me #141

1.6.15 → 1.6.18 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps): Bump the actions group with 3 updates

Deltamir/HeroManager #26

1.6.14 → 1.6.18 Patch PR

Open about 2 months ago 6 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

jerryshell/onpu #23

1.6.2 → 1.6.18 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump better-auth from 1.6.13 to 1.6.18

hendripermana/permoney #102

1.6.13 → 1.6.18 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the web-deps group across 1 directory with 6 updates

archispark/archispark #52

1.6.15 → 1.6.18 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the control-api-deps group across 1 directory with 2 updates

archispark/archispark #51

1.6.15 → 1.6.18 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 5 updates

SIN-Shop-Center/SIN-webshop-01 #82

1.6.17 → 1.6.18 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

danielbodnar/Zero #1

1.3.7 → 1.6.11 Minor PR

Open about 2 months ago 2 comments

chore(deps): Bump the production-dependencies group across 1 directory with 15 updates

ironmussa/funny #34

1.6.14 → 1.6.18 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 45 updates

commet-labs/billsdk #25

1.4.18 → 1.6.18 Minor PR

Closed about 2 months ago 2 comments

build(deps): bump the dependencies group with 7 updates

OpenUp-LabTakizawa/dcrs #1535

1.6.16 → 1.6.18 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump better-auth from 1.6.15 to 1.6.17 in /apps/control-api in the control-api-deps group

archispark/archispark #41

1.6.15 → 1.6.17 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the dev-deps group with 2 updates

SIN-Shop-Center/SIN-webshop-01 #62

1.6.16 → 1.6.17 Patch PR

Open about 2 months ago 2 comments

build(deps): bump better-auth from 1.6.16 to 1.6.17 in the dependencies group

OpenUp-LabTakizawa/robopo #545

1.6.16 → 1.6.17 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 41 updates

Enflame-Media-old/Magic-Agent #304

1.6.14 → 1.6.16 Patch PR

Closed about 2 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

hlebtkachenko/monorepo #362

1.6.11 → 1.6.14 Patch PR

Open about 2 months ago 1 comment

Bump the all-minor-and-patch group with 54 updates

elmohq/elmo #354

1.6.12 → 1.6.14 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates

atimot/diary-app #14

1.6.15 → 1.6.16 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 13 updates

ashark-ai-05/paperclip #4

1.4.18 → 1.6.11 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 13 updates

Heavy02011/paperclip #5

1.4.18 → 1.6.11 Minor PR

Closed about 2 months ago 1 comment

build(deps): bump the dependencies group with 7 updates

OpenUp-LabTakizawa/dcrs #1530

1.6.14 → 1.6.15 Patch PR

Closed about 2 months ago 3 comments

Bump the npm_and_yarn group across 10 directories with 9 updates

Solizardking/solana-clawd #11

1.5.4 → 1.6.11 Minor PR

Open about 2 months ago 8 comments

Package Details

Name:	`better-auth`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/better-auth`
JSON API:	View JSON

Security Advisories

22

Active advisories

CRITICAL 2

HIGH 13

MODERATE 3

LOW 4

View All npm Advisories

Package Information

Description:

The most comprehensive authentication library for TypeScript.

Repository:	https://github.com/better-auth/better-auth
Homepage:	https://github.com/better-auth/better-auth#readme
Latest Release:	`1.2.8` about 1 year ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	422,738
Ranking:	Top 30.4529% by dependent repos Top 43.5938% by dependent pkgs

PR Status

Open 1,323 (53.0%)

Merged 88 (3.5%)

Closed 1,028 (41.2%)

PR Types

Major 8 (0.3%)

Minor 1,200 (48.0%)

Patch 1,228 (49.2%)