{"action":"Upgrade better-auth to 1.2.10 or later.","affected":[{"fixed":"1.2.10","introduced":"0"}],"component":"better-auth","cve_ids":["CVE-2025-53535"],"ecosystem":"npm","epss":0.00378,"exploited":false,"fixed_versions":["1.2.10"],"ghsa_id":"GHSA-36rg-gfq2-3h56","id":"tcs_01M5KEWA8N0HS93RE56SVRB7PW","modified_at":"2025-07-07T22:59:37.760604Z","published_at":"2025-07-07T22:13:14Z","references":["https://osv.dev/vulnerability/GHSA-36rg-gfq2-3h56","https://github.com/better-auth/better-auth/security/advisories/GHSA-36rg-gfq2-3h56","https://nvd.nist.gov/vuln/detail/CVE-2025-53535","https://github.com/better-auth/better-auth/commit/9801d1be53d9da04686b94c6286c53ec97496740","https://github.com/better-auth/better-auth"],"severity":{"label":"low","score":2.1},"sources":[{"source":"osv","source_id":"GHSA-36rg-gfq2-3h56","url":"https://osv.dev/vulnerability/GHSA-36rg-gfq2-3h56"},{"source":"nvd","source_id":"CVE-2025-53535","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53535"}],"summary":"Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes"}