Vulnerabilities

TI-2026-58399 CVE-2026-84993

MikroORM: SQL injection via unvalidated order direction in orderBy

LOW 29

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00506 Published 2026-09-16 Fixed in 6.6.16, 7.1.7 CWE-89

TI-2026-32576 CVE-2026-44680 · GHSA-cfw5-68c4-ffqp

LOW 36

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.0145 Published 2026-05-26 Fixed in 7.0.14, 6.6.14 CWE-89

TI-2026-26515 CVE-2026-34220 · GHSA-gwhv-j974-6fxm

MEDIUM 48

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00434 Published 2026-03-31 Fixed in 6.6.10, 7.0.6 CWE-89

TI-2026-26516 CVE-2026-34221 · GHSA-qpfv-44f3-qqx6

LOW 36

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00383 Published 2026-03-31 Fixed in 6.6.10, 7.0.6 CWE-1321