Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/typeorm@0.3.26
purl pkg:npm/typeorm@0.3.26
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-g39n-m58j-d7h7 TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false. CVE-2025-60542
GHSA-q2pj-6v73-8rgj

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:52:10.006147+00:00 GHSA Importer Fixing VCID-g39n-m58j-d7h7 https://github.com/advisories/GHSA-q2pj-6v73-8rgj 38.6.0
2026-06-04T17:06:21.023867+00:00 GithubOSV Importer Fixing VCID-g39n-m58j-d7h7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-q2pj-6v73-8rgj/GHSA-q2pj-6v73-8rgj.json 38.6.0
2026-06-02T04:48:21.506656+00:00 GitLab Importer Fixing VCID-g39n-m58j-d7h7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/typeorm/CVE-2025-60542.yml 38.6.0