Security Advisory

CVE-2026-34220

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-31 15:19:08

Last updated 2026-04-02 15:19:12

Assigner GitHub_M

CVSS score 9.3

State PUBLISHED

Description

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, there is a SQL injection vulnerability when specially crafted objects are interpreted as raw SQL query fragments. This issue has been patched in versions 6.6.10 and 7.0.6.

← Browse all CVEs View on cve.org ↗