MEDIUM5.7npm
GHSA-2rp8-mm9q-fp49· CVE-2026-73651TypeORM: migration:generate template-literal code injection
Modified: 9/10/2026
package
npm/typeorm
pkg:npm/typeorm
MEDIUM5.9npm
GHSA-9ggv-8w38-r7pmTypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)
Modified: 9/10/2026
CRITICAL9.8npm
GHSA-fx4w-v43j-vc45· CVE-2022-33171SQL injection in typeORM
Modified: 3/21/2024
CRITICAL9.8npm
GHSA-pf2j-9qmp-jqr2· CVE-2020-8158TypeORM vulnerable to MAID and Prototype Pollution
Modified: 11/8/2023
MEDIUM6.5npm
GHSA-q2pj-6v73-8rgj· CVE-2025-60542TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update
Modified: 9/10/2026
CRITICAL9.8npm
GHSA-w7q7-vjp8-7jv4SQL Injection in typeorm
Modified: 2/11/2026