Description
SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | typeorm | < 0.3.26 | 0.3.26 | GHSA-q2pj-6v73-8rgj |
Advisories 1
- WID-SEC-2025-2702 Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Dec 8, 2025