cisagov / cisagov/XFD

Bump TypeORM from 0.2.45 to 0.3.20

Open
#147 0 comments 0 reactions 4 assignees Claimed by @cduhn17 View on GitHub
backend dependencies High Priority security
Dominant language
Python
Stars
30
Forks
22
Avg merge
1d 21h
Merged PRs (30d)
22

Description

# 🐛 Summary #
typeorm <0.3.0
Severity: critical
SQL injection in typeORM - https://github.com/advisories/GHSA-fx4w-v43j-vc45

Updating to version 0.3.20 is a breaking change that requires refactoring 109 instances of the findOne() method across 35 files.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.