Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/29 6:30 p.m.8 views

GHSA-Q2PJ-6V73-8RGJ TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update

Summary SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false. Details Vulnerable Code: js const username, city, name = req.body; const updateData = username, city, name,...

9.5CVSS7.1AI score0.00247EPSS
SaveExploits0References11
Rows per page
Query Builder