mikro-orm vulnerabilities
4 published CVEs name mikro-orm among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84993
MikroORM: SQL injection via unvalidated order direction in orderBy
mikro-orm · mikro-orm
Medium6.5 - CVE-2026-44680
MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys
mikro-orm · mikro-orm
High7.6 - CVE-2026-34220
MikroORM is vulnerable to SQL Injection via specially crafted object
mikro-orm · mikro-orm
Critical9.3 - CVE-2026-34221
MikroORM has Prototype Pollution in Utils.merge
mikro-orm · mikro-orm
High8.3