MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-44680 · CVE overview and exploitation status

EUVD-2026-31893

GHSA-cfw5-68c4-ffqp

cve-program · CVE-2026-44680

• https://github.com/mikro-orm/mikro-orm/security/advisories/GHSA-cfw5-68c4-ffqp
• https://github.com/mikro-orm/mikro-orm/pull/7653
• https://github.com/mikro-orm/mikro-orm/pull/7654
• https://github.com/mikro-orm/mikro-orm/pull/7656
• https://github.com/mikro-orm/mikro-orm/pull/7657

euvd · EUVD-2026-31893

• https://github.com/mikro-orm/mikro-orm/security/advisories/GHSA-cfw5-68c4-ffqp
• https://github.com/mikro-orm/mikro-orm/pull/7653
• https://github.com/mikro-orm/mikro-orm/pull/7654
• https://github.com/mikro-orm/mikro-orm/pull/7656
• https://github.com/mikro-orm/mikro-orm/pull/7657

nvd · CVE-2026-44680

• https://github.com/mikro-orm/mikro-orm/pull/7653
• https://github.com/mikro-orm/mikro-orm/pull/7654
• https://github.com/mikro-orm/mikro-orm/pull/7656
• https://github.com/mikro-orm/mikro-orm/pull/7657
• https://github.com/mikro-orm/mikro-orm/security/advisories/GHSA-cfw5-68c4-ffqp

osv · GHSA-cfw5-68c4-ffqp

• https://github.com/mikro-orm/mikro-orm/security/advisories/GHSA-cfw5-68c4-ffqp
• https://nvd.nist.gov/vuln/detail/CVE-2026-44680
• https://github.com/mikro-orm/mikro-orm/pull/7653
• https://github.com/mikro-orm/mikro-orm/pull/7654
• https://github.com/mikro-orm/mikro-orm/pull/7656
• https://github.com/mikro-orm/mikro-orm/pull/7657
• https://github.com/mikro-orm/mikro-orm

No related changes are available here.