CVE-2026-116808: Sql Injection Identifier Interpolation In Sql Templatecve-2026-116808-sql-injection-identifier-interpolation-in-sql-template
A value is interpolated into the SQL text of a SELECT/JOIN expression as an identifier: an identifier list (`${...join(', ')}`) inside a SELECT subquery, or a raw `${name} as alias` select term. SQL identifiers cannot be neutralized with value escaping, so a crafted filter, breakdown or property name can terminate the enclosing subquery, supply its own FROM/
