WH
Product
Wheels
9
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 2High 3Medium 3Low 1
Watch
Add Wheels to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111444 | 9.8 | Oct 16 | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to… Affected: before 4.2.0 |
| CVE-2026-110911 | 9.8 | Oct 15 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's… Affected: 1.1.8 before 4.1.2 |
Showing 2