honeysql vulnerabilities

CVEs whose affected-version data names the honeysql package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61620Critical· 9.8

1w ago

HoneySQL unchecked entity names can lead to SQL injection results

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword` or `symbol` on that input can produce SQL strings that fac…

▾ Midnightseancorfield · honeysqlEPSS 0.39%via CVEORG