Critical SQL Injection Vulnerability in Wheels Framework (CVE-2026-111444)
A critical SQL injection vulnerability (CVE-2026-111444) with a CVSS score of 9.8 affects the Wheels framework versions prior to 4.2.0, allowing attackers to inject malicious SQL queries on MySQL/MariaDB databases with backslash escaping enabled. Immediate action is required to update to version 4.2.0 or later.