An open index of dependabot pull requests across open source projects.

better-auth

Ecosystem:
npm
Package URL:
pkg:npm/better-auth
Total PRs:
2,419 Dependabot PRs
Latest PR:
40 minutes ago
Unique Repositories:
835 repositories
Unique Repos (30 days):
108 repositories
Security Advisories
Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pending
GHSA-cq3f-vc6p-68fh CVE-2026-45337 HIGH published 3 days ago • updated 3 days ago
### Am I affected? You are affected if all of the following are true: - You use `better-auth` at a version `>= 1.6.0, < 1.6.11`. - The `deviceAut...
Better Auth's rou3 Dependency has Double-Slash Path Normalization which can Bypass disabledPaths Config and Rate Limits
GHSA-x732-6j76-qmhm HIGH published 6 months ago • updated 2 days ago
## Summary An issue in the underlying router library **rou3** can cause `/path` and `//path` to be treated as identical routes. If your environmen...
Better Auth affected by external request basePath modification DoS
GHSA-569q-mpph-wgww LOW published 6 months ago • updated 2 days ago
# Summary Affected versions of Better Auth allow an external request to configure `baseURL` when it isn’t defined through any other means. This ca...
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
GHSA-vp58-j275-797x HIGH published over 1 year ago • updated 2 days ago
### Summary A bypass was discovered in the trustedOrigins validation logic—affecting both absolute URL entries and wildcard domain patterns. This ...
Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)
GHSA-9x4v-xfq5-m8x5 MODERATE published over 1 year ago • updated 2 days ago
### Summary The better-auth `/api/auth/error` page was vulnerable to HTML injection, resulting in a reflected cross-site scripting (XSS) vulnerabil...
Recent PRs
Package Details
Name: better-auth
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/better-auth
JSON API: View JSON
Security Advisories

13

Active advisories
CRITICAL 1
HIGH 6
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

The most comprehensive authentication library for TypeScript.

Repository: https://github.com/better-auth/better-auth
Homepage: https://github.com/better-auth/better-auth#readme
Latest Release: 1.2.8
about 1 year ago
Dependent Repos: 0
Dependent Packages: 0
Downloads: 422,738
Ranking: Top 30.4529% by dependent repos Top 43.5938% by dependent pkgs
PR Status
Open 1,277 (52.9%)
Merged 88 (3.6%)
Closed 989 (41.0%)
PR Types
Major 8 (0.3%)
Minor 1,177 (48.8%)
Patch 1,166 (48.3%)