{"action":"Upgrade better-auth to 1.1.6 or later.","affected":[{"fixed":"1.1.6","introduced":"0"}],"component":"better-auth","cve_ids":["CVE-2024-56734"],"ecosystem":"npm","epss":0.00387,"exploited":false,"fixed_versions":["1.1.6"],"ghsa_id":"GHSA-8jhw-6pjj-8723","id":"tcs_01M5KFD9XGADTMMED7036DJ3JX","modified_at":"2026-02-04T04:29:32.607975Z","published_at":"2024-12-30T16:49:12Z","references":["https://osv.dev/vulnerability/GHSA-8jhw-6pjj-8723","https://github.com/better-auth/better-auth/security/advisories/GHSA-8jhw-6pjj-8723","https://nvd.nist.gov/vuln/detail/CVE-2024-56734","https://github.com/better-auth/better-auth/commit/deb3d73aea90d0468d92723f4511542b593e522f","https://github.com/better-auth/better-auth"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-8jhw-6pjj-8723","url":"https://osv.dev/vulnerability/GHSA-8jhw-6pjj-8723"},{"source":"nvd","source_id":"CVE-2024-56734","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56734"}],"summary":"Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint"}