Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps)(deps): bump drizzle-orm from 0.45.1 to 0.45.2

Open
Number: #146
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 22
Created: April 08, 2026 at 07:26 AM UTC
(2 months ago)
Updated: April 16, 2026 at 06:07 AM UTC
(about 2 months ago)
Labels:
dependencies javascript
Description:

Bumps drizzle-orm from 0.45.1 to 0.45.2.

Release notes

Sourced from drizzle-orm's releases.

0.45.2

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

Commits

Package Dependencies
Package:
drizzle-orm
Ecosystem:
npm
Version Change:
0.45.1 → 0.45.2
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 15321970
UUID: 4222832896
Node ID: PR_kwDOQpX1xc7QuduI
Host: GitHub
Repository: robertpelloni/hypercode