CVE-2025-71403
1 advisory.
npm/better-auth CVE-2025-71403: high 7.1
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
Action: Upgrade better-auth to 1.1.21 or later.
npm i better-auth@1.1.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.21 | - |
Fixed versions
| 1.1.21 |
Sources
- osv: GHSA-vp58-j275-797x
- https://github.com/better-auth/better-auth/security/advisories/GHSA-vp58-j275-797x
- https://github.com/better-auth/better-auth/commit/b381cac7aafd6aa53ef78b6ab771ebfa24643c80
- https://github.com/better-auth/better-auth
- https://github.com/better-auth/better-auth/blob/ddebd0358d74376ea64541512d0167dd4377f182/packages/better-auth/src/api/middlewares/origin-check.ts#L53
CVE-2025-71403 · published · modified · JSON