Skip to content
Threat Feed

Tag

Cve-2026-33442

1 brief RSS
high advisory

SQL Injection Vulnerability in Kysely TypeScript Library (CVE-2026-33442)

Kysely versions 0.28.12 and 0.28.13 are vulnerable to SQL injection due to insufficient escaping of backslashes in the `sanitizeStringLiteral` method, potentially leading to arbitrary SQL execution on MySQL servers.

sql-injection kysely cve-2026-33442
2r 1t