CVE-2025-60542

CVE-2025-60542CVE-2025-60542

Description

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Last modified2026-10-27
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.