Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/04/09 12:57 p.m.23 views

crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

9.3CVSS7.3AI score0.00343EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/04/09 12:57 p.m.9 views

GHSA-9R25-RP3P-H2W4 crud-query-parser SQL Injection vulnerability

Impact Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter. Versions 0.0.1, 0.0.2 and 0.0.3 are affected b...

8.6CVSS7.3AI score0.00343EPSS
SaveExploits0References3
Rows per page
Query Builder