CVE-2026-53512

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth token endpoints whose refreshtoken grant authenticates only possession of the bound refreshToken row and matching clientid, without verifying the...

CVE-2026-53512

creationtimestamp| type| source ---|---|--- 2026-07-07 20:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3ifp5g5c2q 2026-07-15 19:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqph2wla3a22...