The most comprehensive authentication framework for TypeScript.
91%
Total Score
100
60
89
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-53516 better-auth is vulnerable to Improper Authentication in versions 0.0.0 - 1.6.11. | 0.0.0 - 1.6.11 | High |
CVE-2026-53514 better-auth is vulnerable to Improper Authentication in versions 0.0.0 - 1.6.11. | 0.0.0 - 1.6.11 | High |
CVE-2026-53512 better-auth is vulnerable to Improper Authentication in versions 0.0.0 - 1.6.11. | 0.0.0 - 1.6.11 | Critical |
AIKIDO-2026-310135 better-auth is vulnerable to Improper Authentication in versions 1.1.3 - 1.6.21. | 1.1.3 - 1.6.21 | High |
AIKIDO-2026-32209 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. better-auth is vulnerable to Improper Input Validation in versions 1.6.17 - 1.6.18. | 1.6.17 - 1.6.18 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
zod Version ^4.3.6 | — | — |
defu Version ^6.1.4 | — | — |
jose Version ^6.1.3 | — | — |
kysely Version ^0.28.17 || ^0.29.0 | — | — |
nanostores Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant