Vendors / typeorm Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now typeorm records in CISA KEV No typeorm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.21393 · Published 2022-07-04 · Fixed in 0.3.0 CWE-89
Priority MEDIUM 46
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0212 · Published 2020-09-18 · Fixed in 0.2.25 CWE-471
Priority LOW 28
TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases.
CVSS 3.1 MEDIUM 5.7· Network · High privileges · User interaction · EPSS 0.00392 · Published 2026-08-13 · Partial fix · 0.3.31, 1.1.0 CWE-94
Open these records in search → All records by CVSS severity
2 0 1 0 0
