OsVault/npm/typeorm
npm2 critical

typeorm

7 known vulnerabilities · 2 critical · 0 high

CVE-2022-33171CRITICAL

SQL injection in typeORM

Published Jul 5, 2022
CVE-2025-60542

TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update

Published Oct 29, 2025
CVE-2020-8158CRITICAL

TypeORM vulnerable to MAID and Prototype Pollution

Published May 7, 2021
GHSA-w7q7-vjp8-7jv4

SQL Injection in typeorm

Published Jun 6, 2019
GHSA-9ggv-8w38-r7pm

TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)

Published Jun 19, 2026
MAL-2026-5633

Malicious code in typeorm-encrypt (npm)

Published Jun 11, 2026
MAL-2025-190786

Malicious code in typeorm-orbit (npm)

Published Nov 24, 2025
Check your entire dependency tree at onceRun dependency scan →