Browse CVEs

HIGH 7.5 CVE-2026-40879 Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.19, when an attacker sends many small, valid JSON messages … Nest 11.1.19+ Fix from $1,9502026-04-21 MEDIUM 6.1 CVE-2026-35515 Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and me… Nest 11.1.18+ Fix from $1,6002026-04-07 HIGH 7.5 CVE-2026-33011 Nest is a framework for building scalable Node.js server-side applications. In versions 11.1.15 and below, a NestJS application using @nestjs/platfor… Nest 11.1.16+ Fix from $1,9502026-03-20 CRITICAL 9.8 CVE-2026-2293 A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization optio… Nest Mitigation only Fix from $2,3002026-02-27 HIGH 7.4 CVE-2025-69211 Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. … Nest 11.1.11+ Fix from $1,9502025-12-29 HIGH 8.8 CVE-2025-54782EPSS 48% Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulne… Devtools Integration 0.2.1+ Fix from $1,9502025-08-02 MEDIUM 5.5 CVE-2024-29409 File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header. Nest No fix yet Fix from $1,6002025-03-14 MEDIUM 5.3 CVE-2023-26108 Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability i… Nest 9.0.5+ Fix from $1,6002023-03-06