@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

影響: npm:@better-auth/drizzle-adapter >= 1.6.17, < 1.7.7 → 1.7.7, npm:@better-auth/kysely-adapter >= 1.6.17, < 1.7.0 → 1.7.0, npm:better-auth >= 1.6.17, < 1.7.7 → 1.7.7

Am I affected? You are affected if you use @better-auth/drizzle-adapter from 1.6.17 through versions before 1.7.7 (including the 1.7.0 prereleases from beta.6 through rc.6) or @better-auth/kysely-adapter 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these must be true: - Rate limiting is enabled. - Rate-limit records are stored in the database. - The database is PostgreSQL, used through one of the adapter versions above. You are not affected if you store ra…

在 GitHub Advisory Database 阅读

2026/10/28 00:32，GitHub Advisory Database 发布了“@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL”（类型：漏洞公告）。严重程度为“低危”（low）。相关技术：JavaScript / Node.js、PostgreSQL。