typeorm vulnerabilities (npm)

6 vulnerabilities.

• typeorm npm TypeORM: migration:generate template-literal code injection CVE-2026-73651 Fix available 5.7 MediumJuly 21, 2026
• typeorm npm TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB) GHSA-9ggv-8w38-r7pm Fix available 5.9 MediumJune 19, 2026
• typeorm npm TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update CVE-2025-60542 Fix available 6.5 MediumOctober 29, 2025
• typeorm npm SQL injection in typeORM CVE-2022-33171 Public exploitFix availableDisputed EPSS 21.4% 9.8 CriticalJuly 4, 2022
• typeorm npm TypeORM vulnerable to MAID and Prototype Pollution CVE-2020-8158 Public exploitFix available 9.8 CriticalSeptember 18, 2020
• typeorm npm SQL Injection in typeorm GHSA-w7q7-vjp8-7jv4 Fix available 9.8 CriticalJune 6, 2019