Description (CNA)
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / typeorm | affected Fixed Version: 0.2.25 |
CWE
CWE-471
References
ADP enrichment
No English description supplied.