GHSA-W7Q7-VJP8-7JV4

SQL Injection in typeorm

Title source: GitHub Advisory
STIX 2.1 vulnerability

Description

Versions of `typeorm` before 0.1.15 are vulnerable to SQL Injection. Field names are not properly validated allowing attackers to inject SQL statements and execute arbitrary SQL queries. ## Recommendation Upgrade to version 0.1.15

Description source: GitHub Advisory

Affected products and versions

1
ProductSourceVersion range

typeorm

Browse npm / typeorm
GitHub AdvisoryBefore 0.1.15 · Fixed in 0.1.15affected

References

4