@better-auth/kysely-adapter has 1 advisory. Version not read yet.

npm

Versions

Red: affected by at least one advisory. White: safe. The dot is the version in your lockfile.

1.x
safe 1.7.0
AffectedSafe

Details

You run
not in lockfile
Safe
1.7.0
Advisories
1 in 120 days

Used by

Stacks that pull this package.

Not part of a tracked stack.

Alerts(1)

@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

@better-auth/drizzle-adapter · 30 Sep

Low
Exploitable only if · read by Claude, the source remains the reference
  • Uses @better-auth/drizzle-adapter (standalone or bundled with better-auth) from 1.6.17 up to before 1.7.7 (including 1.7.0 beta.6 through rc.6), or a stable 1.6.x release of @better-auth/kysely-adapter from 1.6.17 onward.
  • Rate limiting is enabled.
  • Rate-limit records are stored in the database (not in memory or secondary storage).
  • The database is PostgreSQL, accessed through one of the affected adapter versions.
Affected
@better-auth/drizzle-adapter >=1.6.17 <1.7.7 · @better-auth/kysely-adapter >=1.6.17 <1.7.0 · better-auth >=1.6.17 <1.7.7
Fixed in
1.7.7 · 1.7.0
ID
GHSA-44jh-23m7-hpcf
Open the alert