SQL injection in the Trilogy MySQL adapter

Yesterday a security advisory was published for Trilogy, the MySQL client used by GitHub in production. GHSA-744p-w4gc-m3gh is a SQL injection in Trilogy#escape, rated critical with a CVSS score of 9.3. It affects every version up to and including 2.13.1 and is fixed in 2.13.2. There is no CVE assigned yet, and it was discovered by Anthropic’s OSS Scanner.