CVE-2026-56778: Typeorm Unscoped Or Authorization Bypass
A TypeORM query uses an array for the 'where' option or a Brackets query builder translating to a logical OR in SQL. One of the conditions introduces a user/tenant scoping variable (e.g., userId), while the other lacks it. This permits authorization bypass (IDOR) where an attacker can access globally scoped records if they satisfy the unscoped condition. Ens
TSgreprules fetch cve-2026-56778-typeorm-unscoped-or-authorization-bypass --engine opengrepDescription
A TypeORM query uses an array for the 'where' option or a Brackets query builder translating to a logical OR in SQL. One of the conditions introduces a user/tenant scoping variable (e.g., userId), while the other lacks it. This permits authorization bypass (IDOR) where an attacker can access globally scoped records if they satisfy the unscoped condition. Ens
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.