{"vulnerability": "CVE-2025-71401", "sightings": [{"uuid": "1238edeb-73f3-4a6a-adbe-c4c74de2459c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71401", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms5os36ck22s", "content": "CVE-2025-71401 - better-auth\nIf Better Auth is not properly configured, an attacker can make a specific type of request that breaks all routes, causing users to see 404 errors. This only happens if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #bekacru #npm #CVE #infosec", "creation_timestamp": "2026-08-03T04:44:05.121665Z"}, {"uuid": "a80f0c1c-4274-4f85-9c55-3050b3b5ad07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71401", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msavnlqgs323", "content": "CVE-2025-71401 \u00b7 trending #8\n\nCurrently trending CVE - Hype Score: 3 - better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined (e.g., BETTER_AUTH_URL is unset). An attacker able to make the v... https://cvemon.intruder.io/cves/CVE-2025-71401", "creation_timestamp": "2026-08-04T11:24:49.988878Z"}]}