CVE-2025-60542

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

Published Oct 30, 2025

https://github.com/advisories/GHSA-q2pj-6v73-8rgj

CVSS ScoreMedium

6.9

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-60542

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

Published Oct 30, 2025

https://github.com/advisories/GHSA-q2pj-6v73-8rgj

CVSS ScoreMedium

6.9


npm	@10pearls/typeorm	0.3.0-alpha.22-10p
npm	@10pearls/typeorm	0.3.0-alpha.23-10p
npm	@211la/typeorm	0.2.46
npm	@4itech/typeorm	0.3.20
npm	@4itech/typeorm	0.3.50
npm	@4itech/typeorm	0.3.51
npm	@4itech/typeorm	1.0.0
npm	@afmelsaidy/typeorm	0.2.0-alpha.30
npm	@afmelsaidy/typeorm	0.2.0-alpha.31
npm	@afmelsaidy/typeorm	0.2.0-alpha.40
npm	@akylas/typeorm	0.2.2-5.1
npm	@akylas/typeorm	0.2.25
npm	@alm1983/typeorm	0.2.41-14
npm	@alm1983/typeorm	0.2.41-15
npm	@alm1983/typeorm	0.2.41-16
npm	@alm1983/typeorm	0.2.41-18
npm	@alm1983/typeorm	0.2.41-19
npm	@alm1983/typeorm	0.2.41-20
npm	@alm1983/typeorm	0.2.41-21
npm	@alm1983/typeorm	0.2.41-22
npm	@alm1983/typeorm	0.2.41-23
npm	@alm1983/typeorm	0.2.41-24
npm	@alm1983/typeorm	0.2.41-4
npm	@alm1983/typeorm	0.2.41-5
npm	@alm1983/typeorm	0.2.41-6
npm	@alm1983/typeorm	0.3.20-10
npm	@alm1983/typeorm	0.3.20-11
npm	@alm1983/typeorm	0.3.20-1
npm	@alm1983/typeorm	0.3.20-2
npm	@alm1983/typeorm	0.3.20-3
npm	@alm1983/typeorm	0.3.20-4
npm	@alm1983/typeorm	0.3.20-5
npm	@alm1983/typeorm	0.3.20-6
npm	@alm1983/typeorm	0.3.20-7
npm	@alm1983/typeorm	0.3.20-8
npm	@alm1983/typeorm	0.3.20-9
npm	@alrn/typeorm	0.3.0-rc.21
npm	@alrn/typeorm	0.3.0-rc.23
npm	@andrewdotn/typeorm	0.2.3100
npm	@apolkingg8/typeorm	2020.7.5
npm	@appsimples/typeorm	0.2.25
npm	@artrainbow/typeorm	0.2.44
npm	@artrainbow/typeorm	0.2.45
npm	@artrainbow/typeorm-expo	0.3.5
npm	@basebit/bb-typeorm	0.2.17-post.0.0.1
npm	@basebit/bb-typeorm	0.2.17
npm	@basebit/typeorm	0.2.1-7.post.0.0.0
npm	@basebit/typeorm	0.2.1-7.post.0.0.1
npm	@basebit/typeorm	0.2.17-post.0.0.1
npm	@basebit/typeorm	0.2.17-post.0.0.2

Ecosystem	Package	Version


npm	@10pearls/typeorm	0.3.0-alpha.22-10p
npm	@10pearls/typeorm	0.3.0-alpha.23-10p
npm	@211la/typeorm	0.2.46
npm	@4itech/typeorm	0.3.20
npm	@4itech/typeorm	0.3.50
npm	@4itech/typeorm	0.3.51
npm	@4itech/typeorm	1.0.0
npm	@afmelsaidy/typeorm	0.2.0-alpha.30
npm	@afmelsaidy/typeorm	0.2.0-alpha.31
npm	@afmelsaidy/typeorm	0.2.0-alpha.40
npm	@akylas/typeorm	0.2.2-5.1
npm	@akylas/typeorm	0.2.25
npm	@alm1983/typeorm	0.2.41-14
npm	@alm1983/typeorm	0.2.41-15
npm	@alm1983/typeorm	0.2.41-16
npm	@alm1983/typeorm	0.2.41-18
npm	@alm1983/typeorm	0.2.41-19
npm	@alm1983/typeorm	0.2.41-20
npm	@alm1983/typeorm	0.2.41-21
npm	@alm1983/typeorm	0.2.41-22
npm	@alm1983/typeorm	0.2.41-23
npm	@alm1983/typeorm	0.2.41-24
npm	@alm1983/typeorm	0.2.41-4
npm	@alm1983/typeorm	0.2.41-5
npm	@alm1983/typeorm	0.2.41-6
npm	@alm1983/typeorm	0.3.20-10
npm	@alm1983/typeorm	0.3.20-11
npm	@alm1983/typeorm	0.3.20-1
npm	@alm1983/typeorm	0.3.20-2
npm	@alm1983/typeorm	0.3.20-3
npm	@alm1983/typeorm	0.3.20-4
npm	@alm1983/typeorm	0.3.20-5
npm	@alm1983/typeorm	0.3.20-6
npm	@alm1983/typeorm	0.3.20-7
npm	@alm1983/typeorm	0.3.20-8
npm	@alm1983/typeorm	0.3.20-9
npm	@alrn/typeorm	0.3.0-rc.21
npm	@alrn/typeorm	0.3.0-rc.23
npm	@andrewdotn/typeorm	0.2.3100
npm	@apolkingg8/typeorm	2020.7.5
npm	@appsimples/typeorm	0.2.25
npm	@artrainbow/typeorm	0.2.44
npm	@artrainbow/typeorm	0.2.45
npm	@artrainbow/typeorm-expo	0.3.5
npm	@basebit/bb-typeorm	0.2.17-post.0.0.1
npm	@basebit/bb-typeorm	0.2.17
npm	@basebit/typeorm	0.2.1-7.post.0.0.0
npm	@basebit/typeorm	0.2.1-7.post.0.0.1
npm	@basebit/typeorm	0.2.17-post.0.0.1
npm	@basebit/typeorm	0.2.17-post.0.0.2

Find vulnerabilities. Fix fast with AI.

CVE-2025-60542

CVE-2025-60542