@mikro-orm mikro-orm

• CVE-2026-84993 Medium 6.5 MikroORM: SQL injection via unvalidated order direction in orderBy 0.5%
• CVE-2026-44680 High 7.6 MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys 1.5%
• CVE-2026-34220 Critical 9.8 MikroORM is vulnerable to SQL Injection via specially crafted object 0.4%
• CVE-2026-34221 High 8.3 MikroORM has Prototype Pollution in Utils.merge 0.4%