https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:16:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343833 EUVD-2026-343833 https://cve.radiocsirt.org/vuln/euvd-2026-343833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67334 <p>better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days after account deletion.</p> <p>better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days after account deletion.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-67334 https://cve.radiocsirt.org/vuln/ghsa-gj53-4jmf-7745 <p>better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days after account deletion.</p> <p>better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days after account deletion.</p> https://cve.radiocsirt.org/vuln/ghsa-gj53-4jmf-7745