THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73651 (MEDIUM 5.7) — TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0, typeorm migration:generate embeds database schema metadata into JavaScript or TypeScript template

[NVD] CVE-2026-73651 (MEDIUM 5.7) — TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0, typeorm migration:generate embeds database schema metadata into JavaScript or TypeScript template

lownvdPublished 2026-08-13

CVE-2026-73651 CVSS: 5.7 MEDIUM Published: 2026-08-13T19:17:38.617

TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0, typeorm migration:generate embeds database schema metadata into JavaScript or TypeScript template literals in src/commands/MigrationGenerateCommand.ts

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-73651cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73651