CVE-2024-56734: URL Redirection to Untrusted Site

Better Auth is an authentication library for TypeScript. An open redirect vulnerability has been identified in the verify email endpoint of all versions of Better Auth prior to v1.1.6, potentially allowing attackers to redirect users to malicious websites. This issue affects users relying on emai...

PT-2025-7795 · Unknown · Better Auth

Name of the Vulnerable Software and Affected Versions: Better Auth versions prior to 1.1.21 Description: The application is vulnerable to an open redirect due to improper validation of the callbackURL parameter in the email verification endpoint and any other endpoint that accepts a callback URL...

Better Auth 输入验证错误漏洞

Better Auth is a framework-agnostic authentication and authorization framework designed for TypeScript. An input validation error vulnerability exists in versions prior to Better Auth v1.1.6, which stems from the presence of an open redirection vulnerability that could allow an attacker to redire...