Detections
Analytics
SCA: security update for better-auth (GHSA-wxw3-q3m9-c3jr)
high Tenable Self-Hosted Container Security Plugin ID 441984
Description
Better Auth: OAuth callback accepts mismatched `state` when cookie-backed state storage is used without PKCESolution
Update the better-auth library and its related packages to version 1.6.2 or later.See Also
Plugin Details
Severity: High
ID: 441984
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 5/15/2026
Updated: 5/15/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 5/15/2026
Vulnerability Publication Date: 5/15/2026