Cross-site Scripting (XSS)

Overview @better-auth/sso is a SSO plugin for Better Auth Affected versions of this package are vulnerable to Cross-site Scripting XSS through the SAML login pipeline in packages/sso/src/routes/saml-pipeline.ts. An attacker can sign in as another user by sending a SAML response whose...