CVE-2026-34221 | mikro-orm MikroORM up to 6.6.9/7.0.5 Javascript Object prototype pollution

A vulnerability classified as critical has been found in mikro-orm MikroORM up to 6.6.9/7.0.5. The affected element is an unknown function of the component Javascript Object Handler. The manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is uniquely identified as CVE-2026-34221. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.