A vulnerability described as critical has been identified in mikro-orm MikroORM up to 6.6.9/7.0.5. Impacted is an unknown function. Executing a manipulation can lead to sql injection.
This vulnerability is handled as CVE-2026-34220. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
