@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

影響: npm:@better-auth/drizzle-adapter >= 1.6.17, < 1.7.7 → 1.7.7, npm:@better-auth/kysely-adapter >= 1.6.17, < 1.7.0 → 1.7.0, npm:better-auth >= 1.6.17, < 1.7.7 → 1.7.7

Am I affected? You are affected if you use @better-auth/drizzle-adapter from 1.6.17 through versions before 1.7.7 (including the 1.7.0 prereleases from beta.6 through rc.6) or @better-auth/kysely-adapter 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these must be true: - Rate limiting is enabled. - Rate-limit records are stored in the database. - The database is PostgreSQL, used through one of the adapter versions above. You are not affected if you store ra…

GitHub Advisory Databaseで読む

2026/10/28 00:32、GitHub Advisory Databaseが「@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「注意」(low) です。関連する技術: JavaScript / Node.js、PostgreSQL。