GHSA lookup

GHSA-5RR4-8452-HF4V

Pruva has a verified reproduction for GHSA-5RR4-8452-HF4V: @better-auth/sso <1.6.11 allows non-blind SSRF via unvalidated OIDC endpoint URLs during SSO provider registration, with potential account takeover when trustEmailVerified is enabled.. The canonical evidence record is REPRO-2026-00274.