@mikro-orm Sql vulnerabilities

• @mikro-orm sql OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution CVE-2026-63393 8.7 HighOctober 30, 2026
• @mikro-orm knex, sql, mikro-orm +2 more MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys CVE-2026-44680 Public exploitFix available 7.6 HighMay 8, 2026