Lucene search
+L

23 matches found

OSV
OSV
•added 2026/08/02 12:15 p.m.•19 views

CVE-2025-71399 Better Auth before 1.4.5 Path Normalization Bypass via rou3

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path resolve to the same route. In Better Auth versions prior to 1.4.5 which bundles the fixed rou3, this can allow...

8.8CVSS5.5AI score
SaveExploits0References5
Rows per page
Query Builder