@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +109 more potentially affected by CVE-2026-44680 via @mikro-orm/knex (>=6.0.0, <=6.6.13-dev.5)

@mikro-orm/knex NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.5.0, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-44680 Source advisory: OSV:GHSA-CFW5-68C4-FFQP...

@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @acmekit/cli (>=2.13.1, <=2.13.94) +109 more potentially affected by CVE-2026-44680 via @mikro-orm/knex (>=6.0.0, <=6.6.13-dev.5)

@mikro-orm/knex NPM version =6.0.0, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =0.5.0, =0.1.29, =0.5.0, =0.6.8 and more Source cves: CVE-2026-44680 Source advisory: SNYK:JS-MIKROORMKNEX-16624725...

SQL Injection

Overview @mikro-orm/knex is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Supports MongoDB, MySQL, PostgreSQL and SQLite databases as well as usage with vanilla JavaScript. Affected versions of this package are vulnerable to SQL Injection via improper...