Starstruk Logo MarkStarstruk

@auth/kysely-adapter@1.11.2

nextauthjs/next-auth@auth/kysely-adapter@1.11.2Apr 14, 2026by gustavovalverde

AI Summary

This release addresses a critical SQL injection vulnerability (CVE-2026-33468) affecting the Kysely adapter by bumping the peer dependency version, followed by a standard dependency update to @auth/core.

Key Highlights

  • Security fix for SQL injection vulnerability (CVE-2026-33468)
  • Dependency update to @auth/core

Full Release Notes

## Security

  - **adapter-kysely**: bump kysely peer dependency to `^0.28.15` for [CVE-2026-33468](https://github.com/advisories/GHSA-8cpq-38p9-67gx) (SQL injection in kysely). PR #13407, commit 0eba7e44.

## Other

  - **@auth/core**: dependency update (67f2b168)