TI-2026-26515 CVE-2026-34220 · GHSA-gwhv-j974-6fxm
MikroORM is vulnerable to SQL Injection via specially crafted object
Priority MEDIUM 48
MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.
mikro-orm
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
mikro-orm records in CISA KEVNo mikro-orm vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Mikroorm · all components
TI-2026-26516 CVE-2026-34221 · GHSA-qpfv-44f3-qqx6
MikroORM has Prototype Pollution in Utils.merge
Priority LOW 36
MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.