EUVD-2026-51839

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

CVE-2026-67328

Summary: CVE-2026-67328 affects @better-auth/sso versions before 1.6.21, which contain multiple authentication bypass vulnerabilities in the SSO provider handling. This can allow attackers to sign in as arbitrary users, enabling unauthorized session access and account takeover. Exploitation vecto...

CVE-2022-38463

ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality...