Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/typeorm@0.1.0-alpha.13
purl pkg:npm/typeorm@0.1.0-alpha.13
Next non-vulnerable version 0.1.15
Latest non-vulnerable version 0.3.26
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-7d2s-wmb5-bybb
Aliases:
GHSA-w7q7-vjp8-7jv4
GMS-2019-144
SQL Injection in typeorm Versions of `typeorm` before 0.1.15 are vulnerable to SQL Injection. Field names are not properly validated allowing attackers to inject SQL statements and execute arbitrary SQL queries. ## Recommendation Upgrade to version 0.1.15
0.1.15
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:57:13.813403+00:00 GitLab Importer Affected by VCID-7d2s-wmb5-bybb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/typeorm/GHSA-w7q7-vjp8-7jv4.yml 38.6.0