CVE-2025-60542

The TypeORM library is vulnerable to SQL Injection (CWE-89) in versions prior to 0.3.26 . The root cause is the improper handling of object values within the sqlstring call, where the stringifyObjects parameter defaults to false . This allows an attacker to inject crafted SQL via requests to the ...