CVE-2025-60542

MediumCVSS 6.5

Published: 29/10/2025(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

Risk Assessment

An attacker can execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion from the database.

Recommendation

Update TypeORM to version 0.3.26 or later, which includes the vulnerability fix.

Other vulnerabilities in TypeORM

CVE-2026-73651Medium
TypeORM prior to versions 0.3.31 and 1.1.0 contains a vulnerability in the migration:generate command that embeds database schema metadata into JavaScript or TypeScript template literals, escaping backticks but not ${...} interpolation. An attacker with database schema write access can place a payload in column COMMENT or DEFAULT metadata, or another introspected schema string, and the JavaScript engine evaluates the payload when the generated migration is loaded.

Original NVD description (English source)

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS