@agent-native/core (>=0.26.5, <=0.47.1), @agentcorporation/server (>=0.3.3, <=0.3.13) +188 more potentially affected by CVE-2026-53516 via @better-auth/core (>=1.3.18, <=1.6.10)

@better-auth/core NPM version =1.3.18, =0.26.5, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =1.3.18, =1.5.0-beta.13 and more Source cves: CVE-2026-53516 Source advisory: SNYK:JS-BETTERAUTHCORE-17889819...

Authentication Bypass Using an Alternate Path or Channel

Overview @better-auth/core is a The most comprehensive authentication framework for TypeScript. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the handleOAuthUserInfo. An attacker can gain unauthorized access to user accounts by...