TypeORM versions prior to 0.3.26 are vulnerable to an SQL injection flaw via crafted requests to repository.save or repository.update methods. The vulnerability arises because the underlying mysql2 driver defaults the stringifyObjects option to false, causing improper SQL stringification of nested objects. This allows attackers to inject additional columns and manipulate SQL update queries.