[typeorm] SQL Injection

I would like to report SQL Injection in typeorm. It allows reading data from database.

            if (value instanceof Function) {
                return value();

            } else {
                escapedParameters.push(value);
                return "?";
            }