kysely vulnerabilities (npm)
4 vulnerabilities.
-
kyselynpm Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()` 7.5 High -
kyselynpm Kysely has a MySQL SQL Injection via Insufficient Backslash Escaping in `sql.lit(string)` usage or similar methods that append string literal values into the compiled SQL strings 8.1 High -
kyselynpm Kysely has a MySQL SQL Injection via Backslash Escape Bypass in non-type-safe usage of JSON path keys. 8.1 High -
kyselynpm SQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`. 8.2 High