Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:28:19 +0000 EUVD-2026-17531 https://cve.radiocsirt.org/vuln/euvd-2026-17531 EUVD-2026-17531 https://cve.radiocsirt.org/vuln/euvd-2026-17531 fkie_cve-2022-33171 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33171 <p>The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection. NOTE: the vendor&#39;s position is that the user&#39;s application is responsible for input validation</p> <p>The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection. NOTE: the vendor&#39;s position is that the user&#39;s application is responsible for input validation</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-33171 GHSA-fx4w-v43j-vc45 — SQL injection in typeORM https://cve.radiocsirt.org/vuln/ghsa-fx4w-v43j-vc45 <p><strong>Affected:</strong> npm: typeorm</p> <p>The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection. NOTE: the vendor&#39;s position is that the user&#39;s application is responsible for input validation.</p> <p><strong>Affected:</strong> npm: typeorm</p> <p>The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection. NOTE: the vendor&#39;s position is that the user&#39;s application is responsible for input validation.</p> https://cve.radiocsirt.org/vuln/ghsa-fx4w-v43j-vc45 gsd-2022-33171 https://cve.radiocsirt.org/vuln/gsd-2022-33171 gsd-2022-33171 https://cve.radiocsirt.org/vuln/gsd-2022-33171