Skip to content
OpenAdvisories

Vendor

Wheels

11 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-111444 Public exploit

    Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent…

  • Critical 9.8

    Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic f…