Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 141 total.

Severity: All Critical High

Library: openclaw 10 SurrealDB 10 grav 7 langflow_oss 6 avi_load_balancer 6 datacycle_core 5 nextcrm_app 4 mpp 3 Wazuh 3 freescout 3 apache_mina_sshd 3 surrealdb 3 getkirby/cms 3 meta-ads-mcp 2 libvips 2 Quicly 2 Netty 2 egroupware/egroupware 2 com.arcadedb:arcadedb-engine 2 @agenticmail/api 2

CVE-2026-53518 HIGH CVSS 7.6 Verified Advisory Jul 15, 2026

Race condition in the `@better-auth/oauth-provider` package (CVE-2026-53518)

CVE-2026-53518 is a race condition vulnerability in the `@better-auth/oauth-provider` package and related `better-auth` plugin paths whereby two concurrent POST requests to the OAuth authorization code token endpoint ...

Fixed in @better-auth/oauth-provider 1.6.11; better-auth 1.6.11

Authentication Bypass Nginx Microsoft Redis

Prev Page 8 of 8