{"action":"Upgrade typeorm to 0.3.31 or later.","affected":[{"fixed":"0.3.31","introduced":"0"},{"fixed":"1.1.0","introduced":"1.0.0"}],"component":"typeorm","cve_ids":["CVE-2026-73651"],"ecosystem":"npm","epss":0.00392,"exploited":false,"fixed_versions":["0.3.31","1.1.0"],"ghsa_id":"GHSA-2rp8-mm9q-fp49","id":"tcs_01M5KEV15WJ9A8CVGW7G11KF5W","modified_at":"2026-09-10T03:51:09.931601769Z","published_at":"2026-07-21T21:59:23Z","references":["https://osv.dev/vulnerability/GHSA-2rp8-mm9q-fp49","https://github.com/typeorm/typeorm/security/advisories/GHSA-2rp8-mm9q-fp49","https://github.com/typeorm/typeorm/commit/41d1c62fe49f99c3ca916d4d986f61ee9f45d519","https://github.com/typeorm/typeorm/commit/b175f9b8be422edd2a2ac035ba90c3f2ce782dfe","https://github.com/typeorm/typeorm","https://github.com/typeorm/typeorm/releases/tag/0.3.31","https://github.com/typeorm/typeorm/releases/tag/1.1.0"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-2rp8-mm9q-fp49","url":"https://osv.dev/vulnerability/GHSA-2rp8-mm9q-fp49"}],"summary":"TypeORM: migration:generate template-literal code injection"}