npm/typeorm: medium 5.9
TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)
Action: Upgrade typeorm to 0.3.29 or later.
npm i typeorm@0.3.29Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.12 | 0.3.29 | - |
Fixed versions
| 0.3.29 |
Sources
- osv: GHSA-9ggv-8w38-r7pm
- https://github.com/typeorm/typeorm/security/advisories/GHSA-9ggv-8w38-r7pm
- https://github.com/typeorm/typeorm/commit/1b66c44d0410bdc56a0dcefb46be41867ec0fffc
- https://github.com/typeorm/typeorm/commit/93eec630630b219b162ba4e0c072afa851697cff
- https://github.com/typeorm/typeorm
published · modified · JSON