Skip to content
OpenAdvisories

Package · npm

@mikro-orm/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-34221

    MikroORM has Prototype Pollution in Utils.merge

    MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, a prototype pollution vulnerability exists in the Utils.merge helper used internally by MikroORM when merging object str…

    mikro-orm mikro-orm @mikro-orm/core npm