drizzle-orm
0.45.4 · 8 Oct 2026Apache-2.018.3M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for drizzle-orm. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 0.45.4 | Safe from 0.45.2 | |
| 0.44.7 | 1 open advisory, worst high | |
| 0.43.1 | 34 open advisories, worst high · last release Apr 2025, no longer updated |
- HighDrizzle ORM has SQL injection via improperly escaped SQL identifiersGHSA-gpj5-g38j-94v9 · 8 Apr 2026
- 0.45.x0.45.0 – 0.45.1Fixed in 0.45.2
- 0.44.x0.44.0 – 0.44.7No fix on 0.44.x · move to 0.45.2
- 0.43.x and older0.9.0 – 0.43.1No fix, no longer updated · move to 0.45.2
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.