PT-2025-62894

Name of the Vulnerable Software and Affected Versions better-auth passkey versions prior to 1.4.0 Description An insecure direct object reference occurs in the passkey deletion endpoint, allowing authenticated users to delete arbitrary passkeys. Attackers with valid sessions can send crafted...