https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:09:44.449164+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343833 EUVD-2026-343833 2026-10-06T03:09:44.541999+00:00 EUVD-2026-343833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67334 fkie_cve-2026-67334 2026-10-06T03:09:44.542036+00:00

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days after account deletion.

 https://cve.radiocsirt.org/vuln/ghsa-gj53-4jmf-7745 GHSA-gj53-4jmf-7745 2026-10-06T03:09:44.542070+00:00

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days after account deletion.