CVE-2026-114607 - better-auth: OAuth state can be used as a Magic Link to sign in as another user
CVE ID :CVE-2026-114607 Published : Oct. 22, 2026, 5:16 p.m. | 50 minutes ago Description :Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to...