Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

kysely — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in kysely, with AI-generated Chinese analysis, references, and POCs.

Vendor: kysely-org

CVE IDTitleCVSSSeverityPublished
CVE-2026-33468 Kysely has a MySQL SQL Injection via Insufficient Backslash Escaping in `sql.lit(string)` usage or similar methods that append string literal values into the compiled SQL strings CWE-89 8.1 High2026-03-26
CVE-2026-33442 Kysely has a MySQL SQL Injection via Backslash Escape Bypass in non-type-safe usage of JSON path keys. CWE-89 8.1 High2026-03-26
CVE-2026-32763 SQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`. CWE-89 8.2 High2026-03-19

All 3 known CVE vulnerabilities affecting kysely with full Chinese analysis, references, and POCs where available.