CVE-2026-114664: Sql Injection Pypika Get Sql Unescaped Backslashcve-2026-114664-sql-injection-pypika-get-sql-unescaped-backslash
Collected pypika filter criteria are rendered to a raw SQL text fragment with $CRITERION.get_sql(with_namespace=True, quote_char=...) and interpolated into the engine's WHERE clause. pypika's ValueWrapper only escapes quote characters, not backslashes, and MariaDB treats '\' as an escape character inside single-quoted string literals, so a user-controlled fi
