pkg:npm/@better-auth/sso

All known vulnerabilities

• CRITICAL9.6CVE-2026-53513@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints
  >= 0.1.0, < 1.6.11
• HIGH7.1CVE-2026-53515@better-auth/sso: SSO provider may allow registration for any org member without a checking their role
  >= 1.2.10, < 1.6.11