Skip to content
@@mikro-orm
Products
| Product | CVEs | Exploited | Latest |
| mikro-orm | 4 | – | Sep 16, 2026 |
| knex | 1 | – | May 26, 2026 |
| sql | 1 | – | May 26, 2026 |
Exploited and recent CVEs
-
CVE-2026-84993
Medium 6.5
MikroORM: SQL injection via unvalidated order direction in orderBy
0.5%
-
CVE-2026-44680
High 7.6
MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys
1.5%
-
CVE-2026-44680
High 7.6
MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys
1.5%
-
CVE-2026-44680
High 7.6
MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys
1.5%
-
CVE-2026-34220
Critical 9.8
MikroORM is vulnerable to SQL Injection via specially crafted object
0.4%
-
CVE-2026-34221
High 8.3
MikroORM has Prototype Pollution in Utils.merge
0.4%