CVE-2026-73651
1 advisory.
npm/typeorm CVE-2026-73651: medium 5.7, EPSS 0.39%
TypeORM: migration:generate template-literal code injection
Action: Upgrade typeorm to 0.3.31 or later.
npm i typeorm@0.3.31npm i typeorm@1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.31 | - |
| 1.0.0 | 1.1.0 | - |
Fixed versions
| 0.3.31 | 1.1.0 |
Sources
- osv: GHSA-2rp8-mm9q-fp49
- https://github.com/typeorm/typeorm/security/advisories/GHSA-2rp8-mm9q-fp49
- https://github.com/typeorm/typeorm/commit/41d1c62fe49f99c3ca916d4d986f61ee9f45d519
- https://github.com/typeorm/typeorm/commit/b175f9b8be422edd2a2ac035ba90c3f2ce782dfe
- https://github.com/typeorm/typeorm
- https://github.com/typeorm/typeorm/releases/tag/0.3.31
- https://github.com/typeorm/typeorm/releases/tag/1.1.0
CVE-2026-73651 · published · modified · JSON