sonatype-2025-004108

Better Auth - Authentication Bypass by Assumed-Immutable Data [CVE-2025-61928]

Published Oct 10, 2025

CVSS ScoreCritical

9.3

sonatype-2025-004108

Better Auth - Authentication Bypass by Assumed-Immutable Data [CVE-2025-61928]

Published Oct 10, 2025

CVSS ScoreCritical

9.3


npm	@drewsapple/better-auth	1.3.6-org-metadata-optional-stringify.0
npm	@drewsapple/better-auth	1.3.6-org-metadata-optional-stringify.1
npm	@hyoban/better-auth	1.2.6-beta.1-1
npm	@hyoban/better-auth	1.2.6-beta.1-2
npm	@hyoban/better-auth	1.2.6-beta.1
npm	@ic4l4s9c/better-auth	1.3.27-rc
npm	@kimonneuhoff/better-auth	1.2.5-beta.8
npm	@kimonneuhoff/better-auth	1.2.5-beta.9
npm	@rekkeh/better-auth	1.3.10-beta.19
npm	@rekkeh/better-auth	1.3.10-beta.20
npm	@rekkeh/better-auth	2.0.0
npm	@rekkeh/better-auth	2.2.0
npm	@rekkeh/better-auth	2.3.0
npm	@rekkeh/better-auth	2.5.0
npm	@rekkeh/better-auth	2.5.1
npm	@rekkeh/better-auth	2.5.4
npm	@rekkeh/better-auth	2.5.5
npm	@ring-3/better-auth	1.3.7
npm	@ring-3/better-auth	1.3.8
npm	@ring-3/better-auth	1.4.0
npm	@ring-3/worse-auth	1.3.27
npm	@ryneex/better-auth	0.0.2
npm	@ryneex/better-auth	0.0.4
npm	@ryneex/better-auth	0.0.5
npm	@ryneex/better-auth	0.1.2
npm	@ryneex/better-auth	0.1.3
npm	@thierrydev/create-thierry-elysia	1.0.0
npm	@tobias-ore/better-auth	1.0.0
npm	@tobias-ore/better-auth	1.0.1
npm	@tobias-ore/better-auth	1.1.0
npm	better-auth	1.2.0-beta.18
npm	better-auth	1.2.0-beta.19
npm	better-auth	1.2.0
npm	better-auth	1.2.1-beta.1
npm	better-auth	1.2.1-beta.2
npm	better-auth	1.2.1-beta.3
npm	better-auth	1.2.1-beta.4
npm	better-auth	1.2.1-beta.5
npm	better-auth	1.2.1-beta.6
npm	better-auth	1.2.1-beta.7
npm	better-auth	1.2.1-beta.8
npm	better-auth	1.2.10-beta.1
npm	better-auth	1.2.10
npm	better-auth	1.2.11
npm	better-auth	1.2.12
npm	better-auth	1.2.1
npm	better-auth	1.2.2-beta.1
npm	better-auth	1.2.2-beta.2
npm	better-auth	1.2.2-beta.3
npm	better-auth	1.2.2-beta.4


npm	@drewsapple/better-auth	1.3.6-org-metadata-optional-stringify.0
npm	@drewsapple/better-auth	1.3.6-org-metadata-optional-stringify.1
npm	@hyoban/better-auth	1.2.6-beta.1-1
npm	@hyoban/better-auth	1.2.6-beta.1-2
npm	@hyoban/better-auth	1.2.6-beta.1
npm	@ic4l4s9c/better-auth	1.3.27-rc
npm	@kimonneuhoff/better-auth	1.2.5-beta.8
npm	@kimonneuhoff/better-auth	1.2.5-beta.9
npm	@rekkeh/better-auth	1.3.10-beta.19
npm	@rekkeh/better-auth	1.3.10-beta.20
npm	@rekkeh/better-auth	2.0.0
npm	@rekkeh/better-auth	2.2.0
npm	@rekkeh/better-auth	2.3.0
npm	@rekkeh/better-auth	2.5.0
npm	@rekkeh/better-auth	2.5.1
npm	@rekkeh/better-auth	2.5.4
npm	@rekkeh/better-auth	2.5.5
npm	@ring-3/better-auth	1.3.7
npm	@ring-3/better-auth	1.3.8
npm	@ring-3/better-auth	1.4.0
npm	@ring-3/worse-auth	1.3.27
npm	@ryneex/better-auth	0.0.2
npm	@ryneex/better-auth	0.0.4
npm	@ryneex/better-auth	0.0.5
npm	@ryneex/better-auth	0.1.2
npm	@ryneex/better-auth	0.1.3
npm	@thierrydev/create-thierry-elysia	1.0.0
npm	@tobias-ore/better-auth	1.0.0
npm	@tobias-ore/better-auth	1.0.1
npm	@tobias-ore/better-auth	1.1.0
npm	better-auth	1.2.0-beta.18
npm	better-auth	1.2.0-beta.19
npm	better-auth	1.2.0
npm	better-auth	1.2.1-beta.1
npm	better-auth	1.2.1-beta.2
npm	better-auth	1.2.1-beta.3
npm	better-auth	1.2.1-beta.4
npm	better-auth	1.2.1-beta.5
npm	better-auth	1.2.1-beta.6
npm	better-auth	1.2.1-beta.7
npm	better-auth	1.2.1-beta.8
npm	better-auth	1.2.10-beta.1
npm	better-auth	1.2.10
npm	better-auth	1.2.11
npm	better-auth	1.2.12
npm	better-auth	1.2.1
npm	better-auth	1.2.2-beta.1
npm	better-auth	1.2.2-beta.2
npm	better-auth	1.2.2-beta.3
npm	better-auth	1.2.2-beta.4

Find vulnerabilities. Fix fast with AI.

sonatype-2025-004108