{"id":"ghsa-ghsa-44jh-23m7-hpcf","seq":1708801,"kind":"advisory","title":"@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL","url":"https://github.com/advisories/GHSA-44jh-23m7-hpcf","permalink":"https://vulnpulse.app/items/ghsa-ghsa-44jh-23m7-hpcf","summary":"影響: npm:@better-auth/drizzle-adapter >= 1.6.17, < 1.7.7 → 1.7.7, npm:@better-auth/kysely-adapter >= 1.6.17, < 1.7.0 → 1.7.0, npm:better-auth >= 1.6.17, < 1.7.7 → 1.7.7\nAm I affected? You are affected if you use @better-auth/drizzle-adapter from 1.6.17 through versions before 1.7.7 (including the 1.7.0 prereleases from beta.6 through rc.6) or @better-auth/kysely-adapter 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these must be true: - Rate limiting is enabled. - Rate-limit records are stored in the database. - The database is PostgreSQL, used through one of the adapter versions above. You are not affected if you store ra…","severity":"low","techs":["nodejs","postgresql"],"cves":[],"tags":["GHSA-44jh-23m7-hpcf","@better-auth/drizzle-adapter","@better-auth/kysely-adapter","better-auth"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T15:32:25.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}