Oauth Provider
Approved changes feed: RSS · Atom
cpe:2.3:a:@better-auth:oauth-provider:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | @Better Auth (89fe5bf2-a8c5-517f-918c-0e44e54f0594) |
|---|---|
| Product | Oauth Provider (de37b39d-c98b-56f4-9675-8739582eacd5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-53517 |
vulnerable | 2026-07-29 01:00:27.056895 |
Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking
HIGH (8.1)
Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the refresh_token grant performs a non-atomic read, validate, revoke, and mint sequence on the oauthRefreshToken row, allowing concurrent requests with the same parent refresh token to pass the revoked check and create forked refresh-token families; the vulnerable range also includes embedded better-auth plugin versions before 1.6.0. This issue is fixed in version 1.6.11.
Published: 2026-07-15T17:33:38.943Z
Updated: 2026-07-15T19:21:22.553Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.