Typeorm vulnerabilities
We track 1 vulnerability in Typeorm products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Typeorm vulnerabilities
- 9.8 Critical severity
Typeorm: Improper Neutralization of Special Elements used in an SQL Command
The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection.