EUVD-2026-51806

@better-auth/stripe versions = 1.4.11 and = 1.7.0-beta.0 and 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The middleware validates the organization ID taken from the request query string against the authorizeReference callback, but the handler reads the...

EUVD-2026-37620

Unauthenticated Broken Access Control in User Registration Stripe = 1.3.12 versions...

EUVD-2026-37595

Unauthenticated Broken Access Control in User Registration Stripe = 1.3.14 versions...

CVE-2026-49081

Unauthenticated Broken Access Control in User Registration Stripe = 1.3.12 versions...

PT-2026-50314

Unauthenticated Broken Access Control in User Registration Stripe = 1.3.14 versions...

CVE-2025-48085

Cross-Site Request Forgery CSRF vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through = 0.9.17...

PT-2025-45200

Cross-Site Request Forgery CSRF vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through = 0.9.17...