# Kysely v0.28.17 — 0.28.17

- Product: Kysely (https://whatsnew.fyi/product/kysely)
- Vendor: Kysely
- Date: 2026-05-03
- Version: v0.28.17
- Original notes: https://github.com/kysely-org/kysely/releases/tag/v0.28.17
- Permalink: https://whatsnew.fyi/product/kysely/releases/v0.28.17

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Further harden JSON path .key(...) and .at(...) against SQL injections and exfiltrations

Hey 👋 

A small batch of bug fixes. Please report any issues. 🤞😰🤞

[0.29](https://github.com/kysely-org/kysely/releases/tag/v0.29.0-rc.0) is right around the corner. Try the latest RC version!

##### 🚀 Features

##### 🐞 Bugfixes

* fix: further harden JSON path `.key(...)` and `.at(...)` against SQL injections and exfiltrations. by @igalklebanov in https://github.com/kysely-org/kysely/pull/1804

##### 📖 Documentation

* docs(returning): remove outdated SQLite alias workaround by @aymenhmaidiwastaken in https://github.com/kysely-org/kysely/pull/1793

##### 📦 CICD & Tooling

##### ⚠️ Breaking Changes

##### 🐤 New Contributors

* @aymenhmaidiwastaken made their first contribution in https://github.com/kysely-org/kysely/pull/1793

##### What's Changed

**Full Changelog**: https://github.com/kysely-org/kysely/compare/v0.28.16...v0.28.17