CVE-2020-8158: 
JavaScript vulnerability analysis and mitigation

A prototype pollution vulnerability was identified in TypeORM package versions below 0.2.25. The vulnerability, tracked as CVE-2020-8158, was discovered and reported in January 2020. This security flaw potentially allows attackers to manipulate Object properties in the TypeORM framework (NVD, CVE Mitre).

The vulnerability is classified as a prototype pollution issue that could lead to SQL injection attacks. The technical nature of the flaw involves the ability to modify Object properties in the TypeORM framework, which could potentially be exploited for malicious purposes (NVD).

The vulnerability can potentially lead to denial of service conditions or SQL injection attacks through the manipulation of Object properties in affected TypeORM implementations (NVD).

The vulnerability was reported through the HackerOne bug bounty platform, suggesting it was discovered during security research. The full details of the exploit were documented in a HackerOne report (HackerOne Report).

The vulnerability was addressed in TypeORM version 0.2.25 and later releases. Users are advised to upgrade to version 0.2.25 or newer to mitigate this security risk (NVD).