Live data from GitHub and npm, updated daily.
Data last fetched: 2026-07-17
5 active CVEs reported via OSV.dev
TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)
SQL injection in typeORM
TypeORM vulnerable to MAID and Prototype Pollution
TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update
SQL Injection in typeorm
Other Database Tools projects in the Node.js ecosystem worth evaluating.
Get SLA-backed support, security patches, and direct access to senior engineers for TypeORM — without relying on volunteer maintainers.