@better-auth oauth-provider

• CVE-2026-67332 Medium 6.4 @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass 0.3%
• CVE-2026-53517 High 8.1 Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking 0.4%
• CVE-2026-41427 High 7.1 Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clients 0.2%