CVE-2026-42475

MixPHP Framework 2.x (up to 2.2.17) is affected by an SQL injection vulnerability in BuildHelper.php (joinOn) triggered by a crafted on array in BuildHelper.php. Root cause is unsafe handling of input in the join condition, enabling an attacker to affect the database query, with the reported CVSS...