CVE-2026-121802 - Better-Auth Expo Improper Authentication Verification Vulnerability
CVE ID :CVE-2026-121802 Published : Nov. 4, 2026, 2:36 a.m. | 28 minutes ago Description :@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checking...