SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| typeorm(npm) | 0 | 0.3.26 | N/A |
CVSS Metrics