@better-auth sso

• CVE-2026-110863 High 8.1 Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers 0.3%
• CVE-2026-80192 High 8.1 better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass 0.4%
• CVE-2026-67328 High 8.1 @better-auth/sso before 1.6.21 Account Takeover via SSO 0.5%
• CVE-2026-53515 High 7.1 Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/sso 0.4%
• CVE-2026-53513 Critical 9.6 Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration 0.2%