CVE-2025-60542

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

Published 2025-10-29. Last modified 2026-06-17.