StackRadar

CVE-2025-60542

Medium

Advisory

Published 29 Oct 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
typeormnpm0.2.18, 0.2.32, 0.2.38, 0.2.39+10 more0.3.2624
OSV records
GHSA-q2pj-6v73-8rgj

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
typeorm@0.3.15
0.3.26

Open the chart page →

2,828
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
typeorm@0.3.15
0.3.26

Open the chart page →

1,721
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
typeorm@0.3.12
0.3.26

Open the chart page →

14,238
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
typeorm@0.3.5
0.3.26

Open the chart page →

5,251
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
typeorm@0.3.18
0.3.26

Open the chart page →

2,635
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
typeorm@0.3.11
0.3.26

Open the chart page →

7,776
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
typeorm@0.3.12
0.3.26

Open the chart page →

2,702
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
typeorm@0.2.32
0.3.26

Open the chart page →

3,444
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
typeorm@0.3.11
0.3.26

Open the chart page →

2,823
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
typeorm@0.3.10
0.3.26

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
typeorm@0.3.12
0.3.26

Open the chart page →

3,071
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
typeorm@0.2.38
0.3.26
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
typeorm@0.2.38
0.3.26

Open the chart page →

6,831
interlay-firesquidinterlay0.1.112 of 4See more

interlay-firesquid interlay 0.1.11

2 of the 4 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
typeorm@0.3.9
0.3.26
subsquid/substrate-explorer:firesquid0889a857f192
typeorm@0.3.12
0.3.26

Open the chart page →

4,667
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
typeorm@0.2.44
0.3.26

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
typeorm@0.2.41
0.3.26

Open the chart page →

5,410
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
typeorm@0.3.12
0.3.26

Open the chart page →

3,555
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
typeorm@0.3.19
0.3.26

Open the chart page →

7,315
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
typeorm@0.2.39
0.3.26

Open the chart page →

9,968
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
typeorm@0.3.15
0.3.26

Open the chart page →

1,884
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
typeorm@0.2.18
0.3.26

Open the chart page →

5,215
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
typeorm@0.3.12
0.3.26

Open the chart page →

15,591
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.26

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-60542.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.26

Open the chart page →

5,604

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.26
2
activepieces/activepieces:0.23.0c26188b44e62
typeorm@0.3.18
0.3.26
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
typeorm@0.3.10
0.3.26
1
bnjbvr/kresus:0.22.137e216b182c8
typeorm@0.3.12
0.3.26
1
fallenbagel/jellyseerr:latest4538137bc5af
typeorm@0.3.12
0.3.26
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
typeorm@0.3.12
0.3.26
1
gristlabs/grist:0.7.96e71b1914a7e
typeorm@0.2.18
0.3.26
1
heywood8/redisinsight:2.28.00bc9ab313d37
typeorm@0.3.15
0.3.26
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
typeorm@0.2.38
0.3.26
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
typeorm@0.3.9
0.3.26
1
linuxserver/overseerr:1.35.06108ed066d4a
typeorm@0.3.12
0.3.26
1
misskey/misskey:12.110.1e08b7c478093
typeorm@0.3.5
0.3.26
1
n8nio/n8n:0.212.0a9195bc499a3
typeorm@0.3.11
0.3.26
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
typeorm@0.2.44
0.3.26
1
redis/redisinsight:2.68019fcf774631
typeorm@0.3.15
0.3.26
1
redis/redisinsight:2.46699d341bd329
typeorm@0.3.15
0.3.26
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
typeorm@0.2.38
0.3.26
1
subsquid/substrate-explorer:firesquid0889a857f192
typeorm@0.3.12
0.3.26
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
typeorm@0.2.41
0.3.26
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
typeorm@0.3.11
0.3.26
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
typeorm@0.3.19
0.3.26
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
typeorm@0.2.32
0.3.26
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
typeorm@0.3.12
0.3.26
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
typeorm@0.2.39
0.3.26
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.