@mikro-orm/core vulnerabilities (npm)

2 vulnerabilities.

• @mikro-orm/core npm MikroORM has Prototype Pollution in Utils.merge CVE-2026-34221 Fix available 8.3 HighMarch 29, 2026
• @mikro-orm/core npm MikroORM is vulnerable to SQL Injection via specially crafted object CVE-2026-34220 Public exploitFix available 9.3 CriticalMarch 29, 2026