Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

kysely — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in kysely, with AI-generated Chinese analysis, references, and POCs.

Vendor: kysely-org

CVE IDTitleCVSSSeverityPublished
CVE-2026-44635 Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()` CWE-22 7.5 High2026-05-27
CVE-2026-33468 Kysely has a MySQL SQL Injection via Insufficient Backslash Escaping in `sql.lit(string)` usage or similar methods that append string literal values into the compiled SQL strings CWE-89 8.1 High2026-03-26
CVE-2026-33442 Kysely has a MySQL SQL Injection via Backslash Escape Bypass in non-type-safe usage of JSON path keys. CWE-89 8.1 High2026-03-26
CVE-2026-32763 SQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`. CWE-89 8.2 High2026-03-19

All 4 known CVE vulnerabilities affecting kysely with full Chinese analysis, references, and POCs where available.