Repository navigation
Security: convex/better-auth
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Emailed links can point at an attacker's host with a dynamic baseURLGHSA-pgx2-m66h-x29f published
Oct 26, 2026 by erquhartModerate -
Cross-domain plugin can deliver a victim’s session token to an attacker-controlled trusted originGHSA-j8qq-g9pm-v3c2 published
Oct 26, 2026 by erquhartHigh
Learn more about advisories related to convex/better-auth in the GitHub Advisory Database