CVE-2026-33468

Kysely is a type-safe TypeScript SQL query builder. Prior to version 0.28.14, Kysely's "DefaultQueryCompiler.sanitizeStringLiteral" only escapes single quotes by doubling them "'" → "''" but does not escape backslashes. When used with the MySQL dialect where "NOBACKSLASHESCAPES" is OFF by default...