CVE-2026-25051: Typeorm Unscoped Personal Record Idorcve-2026-25051-typeorm-unscoped-personal-record-idor
A TypeORM query uses a logical OR condition (`where` array or `orWhere`) to fetch records generically matched as 'personal' across the entire database, bypassing user-specific constraints. This results in an Insecure Direct Object Reference (IDOR) data exposure. Ensure 'personal' queries are strictly bounded by explicitly requested owner/user constraints on
