npm/better-auth CVE-2024-56734: medium 6.1, EPSS 0.39%
Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
Action: Upgrade better-auth to 1.1.6 or later.
npm i better-auth@1.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.6 | - |
Fixed versions
| 1.1.6 |
Sources
- osv: GHSA-8jhw-6pjj-8723
- nvd: CVE-2024-56734
- https://github.com/better-auth/better-auth/security/advisories/GHSA-8jhw-6pjj-8723
- https://github.com/better-auth/better-auth/commit/deb3d73aea90d0468d92723f4511542b593e522f
- https://github.com/better-auth/better-auth
CVE-2024-56734 · published · modified · JSON