typeorm

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

typeorm records in CISA KEV

No typeorm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Typeorm 2 records HIGH

Records

2 records in Typeorm · all components

TI-2022-14604 CVE-2022-33171 · GHSA-fx4w-v43j-vc45

The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a…

HIGH 75

The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.21393 Published 2022-07-04 Fixed in 0.3.0 CWE-89

TI-2020-06576 CVE-2020-8158 · GHSA-pf2j-9qmp-jqr2

Prototype pollution in typeorm

MEDIUM 46

Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0212 Published 2020-09-18 Fixed in 0.2.25 CWE-471

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0