1. Kysely SQL Injection Vulnerability Exposed: CVE-2026-32763 in JSON Path Compilation
A critical SQL injection vulnerability has been disclosed in the popular Kysely SQL query builder, exposing applications using its MySQL and SQLite dialects to potential data manipulation and exfiltration attacks. The flaw, tracked as CVE-2026-32763, resides in versions through 0.28.11 and stems from improper handling ...