SQL Injection in typeorm

概要

参考情報

• typeorm/typeorm commit d46c8b0 · WEB
• hackerone.com/reports/319458 · WEB
• typeorm/typeorm · PACKAGE
• npmjs.com/advisories/800 · WEB

typeorm のその他の脆弱性

• CVE-2026-73651中 5.7TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other datab…
• GHSA-9ggv-8w38-r7pm中 5.9TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)
• CVE-2025-60542中 6.5SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call u…
• CVE-2022-33171緊急 9.8The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is …
• CVE-2020-8158緊急 9.8Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further …