https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:47:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-352673 EUVD-2026-352673 https://cve.radiocsirt.org/vuln/euvd-2026-352673 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67331 <p>better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users&#39; providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.</p> <p>better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users&#39; providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-67331 https://cve.radiocsirt.org/vuln/ghsa-gj37-5j8h-j367 <p>better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users&#39; providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.</p> <p>better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users&#39; providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.</p> https://cve.radiocsirt.org/vuln/ghsa-gj37-5j8h-j367