{"vulnerability": "CVE-2026-6733", "sightings": [{"uuid": "05bddbc2-b597-4ebf-bf4e-e3b007aa2aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqemwqfs2l", "content": "\ud83d\udfe0 CVE-2026-67336 - High (8.7)\n\nbetter-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67336/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:01:42.565388Z"}, {"uuid": "6d809854-b7b2-4790-a3d2-87dfab5f4d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67330", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22eznwih2t", "content": "\ud83d\udd34 CVE-2026-67330 - Critical (9.9)\n\n@better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through = 1.7.0-beta.0 through...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67330/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T18:00:53.460903Z"}, {"uuid": "589aa36c-e344-443d-832a-3f1a9a6dfc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a", "content": "\ud83d\udfe0 CVE-2026-67331 - High (8.3)\n\nbetter-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM provi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67331/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T20:00:50.265172Z"}, {"uuid": "6acaefcd-d848-42a5-a7e0-1a6b9c826445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67330", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2eapxu2s", "content": "CVE-2026-67330 - scim\nThe Better-Auth SCIM plugin in certain versions allows an attacker to take over user accounts and delete sessions. This is a serious risk because it lets someone access and modify other\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#scim #betterauth #CVE #infosec", "creation_timestamp": "2026-08-01T20:18:04.992026Z"}, {"uuid": "84dbf111-3d4c-498c-bda1-ebb3d04909a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2flwuo23", "content": "CVE-2026-67336 - better-auth\nVersions of better-auth before 1.6.11 have default settings that make it easier for attackers to intercept sensitive information. This affects the oidcProvider and mcp plugins, which\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #CVE #infosec", "creation_timestamp": "2026-08-01T20:18:06.527886Z"}, {"uuid": "afd8bb8c-9610-4abf-be0b-03394922257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67337", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2hklkgj22d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67337 \u0432 better-auth: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e\n\n\n\nhttps://kripta.biz/posts/F0F82A27-7AE3-4129-84DD-3A1CF235223A", "creation_timestamp": "2026-08-01T21:56:38.255704Z"}, {"uuid": "bc0c363d-ffe9-4853-9b75-ccb2018a36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2hphbbqr2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OAuth 2.0 \u0438 OpenID Connect\n\n\n\nhttps://kripta.biz/posts/4E0C312D-4299-4591-BE0A-8E7A39674D92", "creation_timestamp": "2026-08-01T21:59:21.356996Z"}, {"uuid": "8dd2db1e-4e03-4518-becf-987ac215ab9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2hq24uci2c", "content": "CVE-2026-67336: \u05d7\u05e9\u05d9\u05e4\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05e7\u05e8\u05d9\u05e4\u05d8\u05d5\u05d2\u05e8\u05e4\u05d9\u05ea \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth \u05d5\u05d4\u05e9\u05dc\u05db\u05d5\u05ea\u05d9\u05d4 \u05e2\u05dc \u05d0\u05d1\u05d8\u05d7\u05ea \u05de\u05e2\u05e8\u05db\u05d5\u05ea OAuth\n\n\n\nhttps://khesef.xyz/posts/55C59A3C-FE33-410D-BE83-5E13FF1BE3B4", "creation_timestamp": "2026-08-01T21:59:41.436795Z"}, {"uuid": "9057980a-a331-4027-bc4c-972f5f93da8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67339", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2huylfhn2c", "content": "Guzzle HTTP \u5e93\u5b89\u5168\u6f0f\u6d1e:CVE-2026-67339 \u4ee3\u7406\u6388\u6743\u5934\u6cc4\u9732\u98ce\u9669\u5168\u89e3\u6790\n\n\n\nhttps://qian.cx/posts/77C616DB-D914-4A27-B197-538F1FD1A78E", "creation_timestamp": "2026-08-01T22:02:27.935654Z"}, {"uuid": "8820073a-867a-4e27-92d1-995d7ac0bc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67339", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2huriq3b2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67339 \u0432 Guzzle: \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/54C2D87C-A7C4-4E5C-969A-4EAA35381115", "creation_timestamp": "2026-08-01T22:02:19.734599Z"}, {"uuid": "8aa0f157-b1ae-46a7-9eb3-6438a3d02bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67339", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2hva7phk2v", "content": "CVE-2026-67339: \u05d7\u05e9\u05d9\u05e4\u05ea \u05e1\u05d9\u05e1\u05de\u05d0\u05d5\u05ea Proxy \u05d3\u05e8\u05da Guzzle - \u05de\u05d4 \u05e2\u05d5\u05e9\u05d9\u05dd \u05db\u05d3\u05d9 \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05ea?\n\n\n\nhttps://khesef.xyz/posts/D9AA67AF-4D68-4BE4-AA32-EE87F988D831", "creation_timestamp": "2026-08-01T22:02:35.518988Z"}, {"uuid": "de6f9624-b244-42f4-bdb8-677bdc9b1d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67334", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2i2oy2u22r", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67334:better-auth \u7f13\u5b58\u4f1a\u8bdd\u6e05\u7406\u7f3a\u9677\u5f15\u53d1\u7684\u5b89\u5168\u98ce\u9669\n\n\n\nhttps://qian.cx/posts/FA6CC45C-3BEB-44A3-8DAB-C8AFD8882888", "creation_timestamp": "2026-08-01T22:05:38.533975Z"}, {"uuid": "0eb7b964-87f5-42ac-9e3a-07595d221b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67331 \u0432 better-auth SCIM: \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e bypass \u0438 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435\n\n\n\nhttps://kripta.biz/posts/227FC676-4398-4AB5-9910-E792E6B3AEDF", "creation_timestamp": "2026-08-01T22:07:00.083169Z"}, {"uuid": "6d50b240-851d-44fa-8971-a0ac6e245ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67334", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i2p5vtn2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67334 \u0432 better-auth: \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\n\nhttps://kripta.biz/posts/BBEDFFB8-DB2B-4FC8-9CA2-110EE018514B", "creation_timestamp": "2026-08-01T22:05:39.403885Z"}, {"uuid": "5455735d-c404-41b6-9100-364399b1066c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67335", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2il4vsla2f", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67335:better-auth OAuth \u72b6\u6001\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u6280\u672f\u7ec6\u8282\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/669C759D-C461-4DA3-9AAF-9716F8E5FBAA", "creation_timestamp": "2026-08-01T22:14:51.300072Z"}, {"uuid": "b1b4c366-eb64-4717-aaac-e87e50f59c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67330", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2iphflke2d", "content": "CVE-2026-67330: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 better-auth SCIM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439\n\n\n\nhttps://kripta.biz/posts/AC31E899-CBA8-4B5F-A510-42E0A1413A0C", "creation_timestamp": "2026-08-01T22:17:15.185265Z"}, {"uuid": "ba4d54cb-fe81-4bc7-a053-fe45dc31c897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67330", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2iqflxm52u", "content": "CVE-2026-67330: \u05d4\u05e4\u05e8\u05e6\u05d4 \u05d4\u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-better-auth SCIM \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e9\u05ea\u05dc\u05d8\u05d5\u05ea \u05e2\u05dc \u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d4\u05ea\u05e0\u05d2\u05e9\u05d5\u05ea Provider-ID\n\n\n\nhttps://khesef.xyz/posts/0CEA4309-ECF3-4474-AAEE-57ACBE6A96D8", "creation_timestamp": "2026-08-01T22:17:46.855791Z"}, {"uuid": "ff326fe6-2ad5-46e5-95fa-1af52dab8be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67330", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2j62q7zo2v", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67330:better-auth SCIM \u63d2\u4ef6\u9ad8\u5371\u6f0f\u6d1e\u5bfc\u81f4\u7684\u8d26\u6237\u52ab\u6301\u98ce\u9669\n\n\n\nhttps://qian.cx/posts/76334CC1-AAB7-4747-9A3D-CFD6DA8B8318", "creation_timestamp": "2026-08-01T22:25:25.244647Z"}, {"uuid": "7bf2f6b3-55b6-4a55-bdd4-8843c0ab0ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67332", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jmj437s22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67332 \u0432 OAuth-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0435 better-auth: \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/45FB0B49-65CF-43B4-806D-122776BA2BFC", "creation_timestamp": "2026-08-01T22:33:30.342287Z"}, {"uuid": "12bbca08-c09f-462b-9f1d-ab0704c49585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67332", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jmyhpza25", "content": "CVE-2026-67332: \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-@better-auth/oauth-provider \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u043e\u0431\u0445\u043e\u0434 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea\n\n\n\nhttps://khesef.xyz/posts/167A5641-0C08-4B1F-8849-59F1490B61E8", "creation_timestamp": "2026-08-01T22:33:46.233043Z"}, {"uuid": "7c09e949-929f-4f23-84ee-69b5e24ca62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67333", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jwd337n2v", "content": "CVE-2026-67333: \u05d4\u05e4\u05e8\u05e6\u05d4 \u05d4\u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-better-auth \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05ea\u05e7\u05e4\u05ea XSS \u05de\u05d0\u05d5\u05d7\u05e1\u05e0\u05ea \u05d3\u05e8\u05da redirect_uri\n\n\n\nhttps://khesef.xyz/posts/65B067A7-23A6-4A02-9428-E49641504C92", "creation_timestamp": "2026-08-01T22:38:59.217231Z"}, {"uuid": "6008ac1e-7b52-4500-866f-6252cac116cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67333", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jwe2prf2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67333 \u0432 better-auth: \u043a\u0430\u043a JavaScript redirect_uri \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OAuth-\u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/63AB7C96-DBEF-4297-B709-2E674AC12D26", "creation_timestamp": "2026-08-01T22:39:00.212404Z"}, {"uuid": "fb71b688-2e32-430a-906a-4ffd48a05df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67333", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2jwwsvcf2r", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67333 \u6f0f\u6d1e:better-auth OAuth \u91cd\u5b9a\u5411 URI \u7684\u5b58\u50a8\u578b XSS \u653b\u51fb\u98ce\u9669\n\n\n\nhttps://qian.cx/posts/C098DC41-3532-4625-82C8-08EBC038D311", "creation_timestamp": "2026-08-01T22:39:20.107357Z"}, {"uuid": "af8d1714-9bfb-41d1-80e0-03a8248daa5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67332", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lm5jfcu2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67332 \u0432 OAuth-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0435 @better-auth: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0437\u0430\u0449\u0438\u0442\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/71D632EF-3F6D-469B-89C8-1E42B797246D", "creation_timestamp": "2026-08-01T23:09:05.460579Z"}, {"uuid": "ed84634a-2182-47ba-a1d2-866e30991c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lkr5ys22p", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth SCIM: \u05de\u05d4 \u05e2\u05d5\u05de\u05d3 \u05de\u05d0\u05d7\u05d5\u05e8\u05d9 CVE-2026-67331 \u05d5\u05d0\u05d9\u05da \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05ea \u05e9\u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/12CF6E8A-668D-4F6C-8C0E-1DFC6C2511CE", "creation_timestamp": "2026-08-01T23:08:19.199100Z"}, {"uuid": "9a8f17a8-eb2d-4e3d-ba1e-3612f872da9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lkskyy62l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67331 \u0432 better-auth SCIM: \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7204ADBB-27AE-4411-8766-A41776C11A2E", "creation_timestamp": "2026-08-01T23:08:20.332361Z"}, {"uuid": "aaada10d-7b43-430f-84da-40545bffec36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67332", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2lmp2nkv2n", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67332 \u6f0f\u6d1e:@better-auth/oauth-provider 1.7.0-beta.4 \u524d\u7248\u672c\u8bbf\u95ee\u4ee4\u724c\u53d7\u4f17\u7ed1\u5b9a\u7f3a\u9677\u98ce\u9669\n\n\n\nhttps://qian.cx/posts/45D29E34-79F5-45F1-BF18-E11A54C50855", "creation_timestamp": "2026-08-01T23:09:23.911020Z"}, {"uuid": "9d1df716-0b1d-4046-a933-044691fd1cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67332", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lmp2joy22", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-OAuth Provider \u05e9\u05dc better-auth: \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67332\n\n\n\nhttps://khesef.xyz/posts/AE100E86-A89A-4638-8F12-14112BC5B031", "creation_timestamp": "2026-08-01T23:09:24.413101Z"}, {"uuid": "f3ed9b53-0300-45f2-aecf-7abea04dede0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lycvlav2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u0441\u043b\u0430\u0431\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/59CC029A-9EE3-4AA2-BC0E-C78ADE698516", "creation_timestamp": "2026-08-01T23:15:53.830727Z"}, {"uuid": "f6d59768-8942-4d7a-9532-7aed4903bde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67338", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lzuwy6x24", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c JupyterLab: CVE-2026-67338 \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0430\u043d\u043d\u044b\u0435\n\n\n\nhttps://kripta.biz/posts/C7A25F4A-2464-4C93-A2AF-F81683212889", "creation_timestamp": "2026-08-01T23:16:46.245557Z"}, {"uuid": "82491452-c0fb-4eb5-8f5b-3bae1581a80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lyfqpxo2j", "content": "\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Better-Auth: \u05de\u05d4 \u05db\u05dc \u05de\u05e4\u05ea\u05d7 \u05d5\u05de\u05e9\u05ea\u05de\u05e9 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67336\n\n\n\nhttps://khesef.xyz/posts/6959956F-D7E7-4A35-B7C8-FAE22DC94DA5", "creation_timestamp": "2026-08-01T23:15:56.765309Z"}, {"uuid": "e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2lyo7cei25", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67336:better-auth 1.6.11 \u4e4b\u524d\u7248\u672c\u7684\u52a0\u5bc6\u6f0f\u6d1e\u98ce\u9669\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/DEB17FF7-B423-414C-85F8-2437A2F4045F", "creation_timestamp": "2026-08-01T23:16:05.667017Z"}, {"uuid": "ba369565-7fd2-4b50-b4f5-8bdddfd3f9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67338", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2m2h37u72m", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-JupyterLab: CVE-2026-67338 \u05d5\u05d4\u05e1\u05d9\u05db\u05d5\u05e0\u05d9\u05dd \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/DE05BE0A-61D2-446D-858B-D92127D82692", "creation_timestamp": "2026-08-01T23:17:05.419148Z"}, {"uuid": "fa3aa16e-6b0d-442a-96e1-065f460c5ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67338", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2m2i4uvt2y", "content": "JupyterLab 4.5.9 \u4e4b\u524d\u7248\u672c\u5b58\u5728 XSS \u6f0f\u6d1e?CVE-2026-67338 \u8be6\u89e3\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/0D84D3AB-9845-4784-9830-1395578FAD7D", "creation_timestamp": "2026-08-01T23:17:06.516332Z"}, {"uuid": "4186ef90-a5f0-450e-97b7-8a4027c3fca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67334", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2m7pumbb2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67334 \u0432 better-auth: \u043a\u0430\u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/F4A83CD5-1D58-4D0F-8660-0986E5D4F47E", "creation_timestamp": "2026-08-01T23:20:04.259313Z"}, {"uuid": "eebc4485-5120-4556-ac12-26783b79f4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67334", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2ma6d47d2r", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67334:better-auth 1.6.11 \u4e4b\u524d\u7248\u672c\u4f1a\u8bdd\u7f13\u5b58\u6e05\u7406\u6f0f\u6d1e\u5168\u9762\u5256\u6790\n\n\n\nhttps://qian.cx/posts/5742516D-89BB-4F63-9B47-955529E0313B", "creation_timestamp": "2026-08-01T23:20:17.453668Z"}, {"uuid": "7a7bf998-1f2a-4a2a-9537-8f723316118a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67339", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2mes3sdq2v", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67339 \u0432 Guzzle: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 HTTP-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C96D57EE-4B2E-413A-AE90-8635DA71A6E9", "creation_timestamp": "2026-08-01T23:22:52.576969Z"}, {"uuid": "ae4bfd13-aa13-4531-bbfb-0b135bb1cac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67330", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2mqdvcxy25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67330 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 @better-auth/scim: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\n\n\n\nhttps://kripta.biz/posts/A86EA193-16B1-4771-B626-3099C2B3CE7F", "creation_timestamp": "2026-08-01T23:29:20.293329Z"}, {"uuid": "3a904c68-08fd-49f8-a94a-42b715ed3c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67335", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2mzkoobg2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67335 \u0432 better-auth: \u043a\u0430\u043a \u043d\u0435\u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0439 OAuth state \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/2B41C922-7A52-4D55-8925-78B74B0C267A", "creation_timestamp": "2026-08-01T23:34:29.777979Z"}, {"uuid": "d324acc0-f164-497b-9e15-f8c020953b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67335", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2mzo2yis25", "content": "CVE-2026-67335: \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05d0\u05d1\u05d8\u05d7\u05ea OAuth \u05d1-better-auth - \u05de\u05d4 \u05e2\u05d5\u05de\u05d3 \u05de\u05d0\u05d7\u05d5\u05e8\u05d9\u05d4 \u05d5\u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05ea \u05e9\u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/565EB3B8-FE4A-481A-A65B-DB5959189A2D", "creation_timestamp": "2026-08-01T23:34:32.642012Z"}, {"uuid": "df9aef48-e7e4-469d-af3c-ce45cd43a792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67335", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2n25b64l24", "content": "\u6df1\u5ea6\u89e3\u6790 OAuth \u5b89\u5168\u6f0f\u6d1e:CVE-2026-67335 \u5bf9 better-auth 1.6.2 \u4e4b\u524d\u7248\u672c\u7684\u5a01\u80c1\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/DF9B9D72-F441-45AE-9A71-CF20D79FDC1C", "creation_timestamp": "2026-08-01T23:34:49.590831Z"}, {"uuid": "3a8acded-8c02-417e-8278-462aa2cd8a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117022971447141232", "content": "CVE-2026-67336: better-auth <1.6.11 uses insecure crypto defaults in oidcProvider & mcp, advertising 'none' algo & accepting plain PKCE. Exploitation can lead to unsigned tokens & code interception. Severity: CRITICAL. Patch to 1.6.11+ https://radar.offseq.com/threat/better-auth-versions-before-1611-contain-insecure-cryptographic-defaults-in-the-oidcprovider-and-mcp-eb22076a221f3a81 #OffSeq #CVE202667336 #OAuth #Security", "creation_timestamp": "2026-08-02T00:00:37.529213Z"}, {"uuid": "dec8bc9a-2f02-45b4-98e5-38f5f0c5a71a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67333", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117026310242017758", "content": "CVE-2026-67333 - High sev URL scheme bypass in Better-Auth. javascript: redirect_uri allows XSS on consent pages. CVSS 7.2. No patch yet, block untrusted clients now. #CVE #BetterAuth #infosec\nhttps://www.valtersit.com/cve/CVE-2026-67333/", "creation_timestamp": "2026-08-02T14:12:00.691386Z"}, {"uuid": "3130577d-5b89-44db-a931-d5a422ff3956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117026536615147442", "content": "CVE-2026-67331 - Critical auth flaw in Better-Auth SCIM. Unbound providers let attackers steal tokens, hijack SCIM API access. CVSS 8.3. Unpatched - update immediately if affected. #CVE #infosec #BetterAuth\nhttps://www.valtersit.com/cve/CVE-2026-67331/", "creation_timestamp": "2026-08-02T15:07:19.388260Z"}, {"uuid": "e7599b87-1327-4732-af10-9d85de700352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6733", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3moisymujdc2g", "content": "\ud83d\udea8 Low-severity security fix in undici (6.26.0, 7.28.0, 8.5.0) just released!\n\nPatches CVE-2026-6733. undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse.\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-06-17T17:17:52.225364Z"}, {"uuid": "ebcb8bc1-b118-4b30-83ed-bee614f6af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6733", "type": "seen", "source": "https://bsky.app/profile/nodeland.dev/post/3mol72ngg572i", "content": "\ud83d\udd35 Low: Keep-alive response queue poisoning (CVE-2026-6733).\nA hostile upstream could inject responses onto idle sockets \u2192 wrong response delivered to the wrong request. v6/v7/v8.", "creation_timestamp": "2026-06-18T15:59:06.732247Z"}, {"uuid": "3edaf2b1-2881-4e90-8f2f-553345b1f37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6733", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mozukfdrpx2p", "content": "\n\ud83d\udea8 New LOW CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-6733 impacts undici in 1 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/582\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-24T12:00:55.516015Z"}]}