Skip to content
OpenAdvisories

Product · better-auth

drizzle-adapter

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition

    Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the c…