CVE-2025-60542

Publication date

2025-10-29 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.