critical9.8
CVE-2020-8158
TypeORM vulnerable to MAID and Prototype Pollution
Impact
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | typeorm | < 0.2.25 | 0.2.25 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typeorm | Typeorm | before 0.2.25 |