@mikro-orm

Products

ProductCVEsExploitedLatest
mikro-orm4–Sep 16, 2026
knex1–May 26, 2026
sql1–May 26, 2026

Exploited and recent CVEs

  • CVE-2026-84993 Medium 6.5 MikroORM: SQL injection via unvalidated order direction in orderBy 0.5%
  • CVE-2026-44680 High 7.6 MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys 1.5%
  • CVE-2026-44680 High 7.6 MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys 1.5%
  • CVE-2026-44680 High 7.6 MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys 1.5%
  • CVE-2026-34220 Critical 9.8 MikroORM is vulnerable to SQL Injection via specially crafted object 0.4%
  • CVE-2026-34221 High 8.3 MikroORM has Prototype Pollution in Utils.merge 0.4%