AIKIDO-2026-876083
@better-auth/scim is vulnerable to Information Disclosure
30
Low Risk
This Affects:
@better-auth/scimTL;DR
The SCIM list-users handler logged parsed SCIM filter values at info level before querying accounts. Filter expressions can contain usernames, emails, or other identity attributes that then appear in application logs accessible to operators or log pipelines. Before the fix, listSCIMUsers emitted those filter values on every query. The fix removes the info-level log line while preserving filter parsing and query behavior.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and use the SCIM plugin with server logging that captures info-level output.
Background info
@better-auth/scim is vulnerable to Information Disclosure in versions 1.4.0 - 1.6.18.
How to fix this
Upgrade the @better-auth/scim library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant