Lucene search
+L

13 matches found

osv_ghsa
osv_ghsa
•added 2026/07/07 8:57 p.m.•42 views

GHSA-J8V8-G9CX-5QF4 @better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers

Am I affected? Users are affected if all of these hold: - They install and register the @better-auth/scim plugin plugins: scim. - They create SCIM providers without an organizationId, that is, non-organization "personal" providers. Organization-scoped providers are not affected because they enfor...

8.3CVSS5.8AI score0.00388EPSS
SaveExploits0References3
Rows per page
Query Builder