Em resumo
- CVE-2020-8158 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta typeorm (typeorm), typeorm.
- Chance de exploração nos próximos 30 dias (EPSS): 2.1%, maior que 81.9% das vulnerabilidades.
- Correção: atualize para 0.2.25 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| typeorm | < 0.2.25
| 0.2.25
|
| typeorm npm | < 0.2.25
| 0.2.25
|
Description
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
NVD description
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free