~ / search / GHSA-pf2j-9qmp-jqr2

GHSA-pf2j-9qmp-jqr2

TypeORM vulnerable to MAID and Prototype Pollution

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-8158

Packages

EcosystemPackageAffectedFixed in
npm typeorm < 0.2.25 0.2.25

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.

References

External links from the advisory. They lead to third-party sites.