CVE-2025-71400
1 advisory.
npm/@better-auth/passkey CVE-2025-71400: high 7.1, EPSS 0.35%
Better Auth Passkey Plugin allows passkey deletion through IDOR
Action: Upgrade @better-auth/passkey to 1.4.0 or later.
npm i @better-auth/passkey@1.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0 | - |
Fixed versions
| 1.4.0 |
Sources
- osv: GHSA-4vcf-q4xf-f48m
- https://github.com/better-auth/better-auth/security/advisories/GHSA-4vcf-q4xf-f48m
- https://github.com/better-auth/better-auth/commit/06d68239e
- https://github.com/better-auth/better-auth
CVE-2025-71400 · published · modified · JSON