Backend framework
Drizzle ORM: latest release and open vulnerabilities today
The latest release of the drizzle-orm package is 0.45.4. 1 high or critical advisory for the drizzle-orm package was published in the last 12 months; none of its advisories is on CISA’s list of exploited vulnerabilities.
Last checked against npm, OSV.dev, CISA KEV, FIRST EPSS and deps.dev.
- Latest drizzle-orm release
- 0.45.4
- npm downloads last week
- 28.2M
- GitHub stars
- 36k
- Licence
- Apache-2.0
Security advisories
1 advisory published in the last 12 months, 1 of them high or critical. Checked packages: drizzle-orm.
Drizzle ORM has SQL injection via improperly escaped SQL identifiers
Fixed in 0.45.2.
EPSS: top 66%
Maintenance and supply chain
deps.dev has no OpenSSF Scorecard for this repository.
Docs and release notes
Check Drizzle ORM in your own stack
This page checks Drizzle ORM in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.