Mikroorm vulnerabilities

2 known vulnerabilities in Mikroorm from Mikro-orm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  mikro-orm: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-34221Mar 31, 2026Mikro-orm

  MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, a prototype pollution vulnerability exists in the Utils.merge helper used internally by MikroORM when merging object stru

• 9.3 Critical severity

  mikro-orm: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-34220Mar 31, 2026Mikro-orm

  MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, there is a SQL injection vulnerability when specially crafted objects are interpreted as raw SQL query fragments. This is