Skip to content
OpenAdvisories

Vendor

mikro-orm

4 known vulnerabilities.

Products

mikro-orm 4 knex 1 sql 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-84993

    MikroORM: SQL injection via unvalidated order direction in orderBy

    MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value before AbstractSqlPla…

    mikro-orm mikro-orm