CVE-2026-110911

The Wheels library versions 1.1.8 through 4.1.1 are vulnerable to SQL injection because the parser incorrectly treats a doubled single quote as the end of a literal. This flaw affects dynamic finders like findOneByEmail , query builder methods including where() , and various string/UUID-key looku...