Better Auth ships a security update, v1.7.16 and v1.8.0-beta.5, and asks users to upgrade

Better Auth, the TypeScript authentication library, says on X that v1.7.16 and v1.8.0-beta.5 are on npm as its November 2026 security update, and tells users to upgrade to the fixed version of their release line. Its advisory is at better-auth.com/blog/security-release-2026-11-03.

Vercel says it has automatically applied WAF protections for Vercel users, and that full mitigation needs an update to a patched Better Auth version.