Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/09 12:57 p.m.7 views

GHSA-9R25-RP3P-H2W4 crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

8.6CVSS7.3AI score0.00341EPSS
SaveExploits0References3
Rows per page
Query Builder