Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nest HIGH 7.5
CVE-2026-40879

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.19, when an attacker sends many small, valid JSON messages …

Fix: 11.1.19+
Fix from $1,950 2026-04-21
Nest MEDIUM 6.1
CVE-2026-35515

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and me…

Fix: 11.1.18+
Fix from $1,600 2026-04-07
Nest HIGH 7.5
CVE-2026-33011

Nest is a framework for building scalable Node.js server-side applications. In versions 11.1.15 and below, a NestJS application using @nestjs/platfor…

Fix: 11.1.16+
Fix from $1,950 2026-03-20
Nest CRITICAL 9.8
CVE-2026-2293

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization optio…

Mitigation only
Fix from $2,300 2026-02-27
Nest HIGH 7.4
CVE-2025-69211

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. …

Fix: 11.1.11+
Fix from $1,950 2025-12-29
Devtools Integration HIGH 8.8
CVE-2025-54782EPSS 48%

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulne…

Fix: 0.2.1+
Fix from $1,950 2025-08-02
Nest MEDIUM 5.5
CVE-2024-29409

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.

No fix yet
Fix from $1,600 2025-03-14
Nest MEDIUM 5.3
CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability i…

Fix: 9.0.5+
Fix from $1,600 2023-03-06