better auth vulnerabilities and fixes

Recent CVEs affecting better auth, with upgrade or downgrade steps. 8 tracked.

Also searched as: betterauth.

better auth has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-07-15. Highest priority: CVE-2026-53512 (score 42/100).

• CVE-2026-53518 HIGH 8.1 UPGRADE UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-53517 HIGH 8.1 UPGRADE UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-53513 CRITICAL 9.6 UPGRADE UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-53515 HIGH 7.1 UPGRADE UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-53516 HIGH 8.3 UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-53514 HIGH 7.7 UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-53512 CRITICAL 9.1 UPGRADE Better Auth is an authentication and authorization library for TypeScript
• CVE-2026-45337 HIGH 7.6 UPGRADE Better Auth is an authentication and authorization library for TypeScript

FAQ

How do I fix better auth vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is better auth being exploited right now?

None of the tracked better auth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which better auth CVE should I patch first?

CVE-2026-53512 currently ranks highest (42/100): Better Auth is an authentication and authorization library for TypeScript.

RSS feed for better auth · ← Back to latest CVEs