Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2025/04/09 12:57 p.m.•36 views

crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

9.3CVSS7.3AI score0.00365EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/04/09 12:57 p.m.•21 views

GHSA-9R25-RP3P-H2W4 crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

8.6CVSS7.3AI score0.00365EPSS
SaveExploits0References3
Rows per page
Query Builder