CVE-2022-33171
1 advisory.
npm/typeorm CVE-2022-33171: critical 9.8, EPSS 21.39%
SQL injection in typeORM
Action: Upgrade typeorm to 0.3.0 or later.
npm i typeorm@0.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0 | - |
Fixed versions
| 0.3.0 |
Sources
- osv: GHSA-fx4w-v43j-vc45
- https://nvd.nist.gov/vuln/detail/CVE-2022-33171
- https://github.com/typeorm/typeorm/compare/0.2.45...0.3.0
- https://seclists.org/fulldisclosure/2022/Jun/51
- http://packetstormsecurity.com/files/168096/TypeORM-0.3.7-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2022/Aug/7
CVE-2022-33171 · published · modified · JSON