https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:55:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343918 EUVD-2026-343918 https://cve.radiocsirt.org/vuln/euvd-2026-343918 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71402 <p>better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin&#39;s /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature (e.g., via getSignedCookie). An attacker can supply a forged _multi-* cookie to trigger deletion of arbitrary session tokens.</p> <p>better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin&#39;s /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature (e.g., via getSignedCookie). An attacker can supply a forged _multi-* cookie to trigger deletion of arbitrary session tokens.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-71402 https://cve.radiocsirt.org/vuln/ghsa-rf63-989x-x4x8 <p>better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin&#39;s /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature (e.g., via getSignedCookie). An attacker can supply a forged _multi-* cookie to trigger deletion of arbitrary session tokens.</p> <p>better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin&#39;s /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions without verifying the cookie signature (e.g., via getSignedCookie). An attacker can supply a forged _multi-* cookie to trigger deletion of arbitrary session tokens.</p> https://cve.radiocsirt.org/vuln/ghsa-rf63-989x-x4x8