CVE-2025-53535
Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes
Summary
Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes
Original description
The description as published by the source.
Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This vulnerability is fixed in 1.2.10.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov