OSS Support Hub / Database Tools

Node.js Database Tools MIT Latest: 1.1.2

TypeORM

ORM for TypeScript and JavaScript that supports ActiveRecord and DataMapper patterns

Project Health at a Glance

Live data from GitHub and npm, updated daily.

⭐
36.7K+5
GitHub Stars
📦
1.1.2
Latest Release · 14 days ago
🔄
46d
Avg. Release Cadence
🐛
712
Open Issues
📅
Today
Last Commit
⬇️
2.8M
Weekly Downloads
🔒
6
Active CVEs

Data last fetched: 2026-10-22

Known Vulnerabilities

6 active CVEs reported via OSV.dev

TypeORM: migration:generate template-literal code injection

Published: 2026-07-21 Fixed in: 0.3.31

TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)

Published: 2026-06-19 Fixed in: 0.3.29

SQL injection in typeORM

Published: 2022-07-05 Fixed in: 0.3.0

TypeORM vulnerable to MAID and Prototype Pollution

Published: 2021-05-07 Fixed in: 0.2.25

TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update

Published: 2025-10-29 Fixed in: 0.3.26

SQL Injection in typeorm

Published: 2019-06-06 Fixed in: 0.1.15

Alternatives to TypeORM

Other Database Tools projects in the Node.js ecosystem worth evaluating.

Support Options for TypeORM

Commercial Support from DepKeep

Get SLA-backed support, security patches, and direct access to senior engineers for TypeORM — without relying on volunteer maintainers.