GHSA-j8v8-g9cx-5qf4Published
better-auth SCIM 1.5.0 before 1.7.0-beta.4 Authorization Bypass
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-67331 · Microsoft / collected KEV context
cve-program · CVE-2026-67331
- https://github.com/better-auth/better-auth/security/advisories/GHSA-j8v8-g9cx-5qf4
- https://www.vulncheck.com/advisories/better-auth-scim-before-beta-4-authorization-bypass
nvd · CVE-2026-67331
- https://github.com/better-auth/better-auth/security/advisories/GHSA-j8v8-g9cx-5qf4
- https://www.vulncheck.com/advisories/better-auth-scim-before-beta-4-authorization-bypass
osv · GHSA-j8v8-g9cx-5qf4
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.