Tag

Orm

1 brief RSS

Drizzle ORM SQL Injection Vulnerability (CVE-2026-39356)

Drizzle ORM versions before 0.45.2 and 1.0.0-beta.20 are vulnerable to SQL injection due to improper escaping of SQL identifiers, allowing attackers to inject malicious SQL code through manipulated input leading to potential data breaches.

sql-injection drizzle-orm cve-2026-39356 typescript orm

2r 5t 1c 3w ago