Search for packages
| purl | pkg:npm/typeorm@0.0.2-alpha.57 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-53hy-4nmr-mqgu
Aliases: CVE-2020-8158 GHSA-pf2j-9qmp-jqr2 |
SQL Injection Prototype pollution vulnerability in the TypeORM package may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks. |
Affected by 0 other vulnerabilities. |
|
VCID-ap94-g3tj-4yf3
Aliases: GHSA-w7q7-vjp8-7jv4 GMS-2019-144 |
SQL Injection in typeorm Versions of `typeorm` before 0.1.15 are vulnerable to SQL Injection. Field names are not properly validated allowing attackers to inject SQL statements and execute arbitrary SQL queries. ## Recommendation Upgrade to version 0.1.15 |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:39:04.950750+00:00 | GitLab Importer | Affected by | VCID-53hy-4nmr-mqgu | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/typeorm/CVE-2020-8158.yml | 38.6.0 |
| 2026-06-04T20:22:31.852027+00:00 | GitLab Importer | Affected by | VCID-ap94-g3tj-4yf3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/typeorm/GHSA-w7q7-vjp8-7jv4.yml | 38.6.0 |