[rakibulism]

Summary

GHSA-gpj5-g38j-94v9 / CVE-2026-39356 was fixed for pg-core, mysql-core, sqlite-core, and singlestore-core in #5534 (released as 0.45.2), but gel-core/dialect.ts was not updated in that PR.

GelDialect.escapeName() still does:

escapeName(name: string): string {
  return `"${name}"`;
}

which does not double embedded " characters, so untrusted input passed to sql.identifier() / .as() can break out of the quoted identifier and inject arbitrary SQL — the same issue the original advisory describes, just still present in one dialect.

• Applied the same fix pattern used for the other four dialects (name.replace(/"/g, '""')).
• Added drizzle-orm/tests/gel-escape-name.test.ts, a regression test using the same injection payload from the original advisory's PG test. Confirmed it fails against the unpatched code and passes with the fix.
• Ran the full drizzle-orm unit test suite (568 tests) — all passing.

Test plan

• npx vitest run tests/gel-escape-name.test.ts passes with the fix
• Same test fails when reverted to the vulnerable escapeName implementation (verifies the test actually catches the bug)
• npx vitest run tests/ — 568/568 passing, no regressions

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.