Lucene search
+L

4 matches found

CVE
CVE
added 2026/05/26 4:49 p.m.20 views

CVE-2026-44680

MikroORM is vulnerable to SQL injection via runtime-controlled identifiers and JSON-path keys. The root cause is improper escaping in the identifier-quoting helper (Platform.quoteIdentifier and PostgreSQL/MSSQL overrides) and in JSON-path emitters (Platform.getSearchJsonPropertyKey, quoteJsonKey)...

7.6CVSS6AI score0.01252EPSS
SaveExploits3References5
Rows per page
Query Builder