## @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

- 種別: advisory
- 重大度: low
- 関連技術: nodejs, postgresql
- 公開日時: 2026-10-27T15:32:25.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-44jh-23m7-hpcf)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-44jh-23m7-hpcf

影響: npm:@better-auth/drizzle-adapter >= 1.6.17, < 1.7.7 → 1.7.7, npm:@better-auth/kysely-adapter >= 1.6.17, < 1.7.0 → 1.7.0, npm:better-auth >= 1.6.17, < 1.7.7 → 1.7.7
Am I affected? You are affected if you use @better-auth/drizzle-adapter from 1.6.17 through versions before 1.7.7 (including the 1.7.0 prereleases from beta.6 through rc.6) or @better-auth/kysely-adapter 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these must be true: - Rate limiting is enabled. - Rate-limit records are stored in the database. - The database is PostgreSQL, used through one of the adapter versions above. You are not affected if you store ra…