Security researchers have developed a generic technique for SQL injection that bypasses multiple web application firewalls (WAFs). At the core of the issue was WAF vendors failing to add support for ...

Kysely, JSON Path Injection, CVE-2026-32763 (Critical) How CVE-2026-32763 works: The vulnerability exists in Kysely’s JSON path leg compilation. When an attacker controls input passed to `.key()` or ` ...