Skip to content
OpenAdvisories

Package · npm

@nestjs/microservices

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-102281

    Nest: Remote process termination via a deeply nested microservice message pattern

    Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate a NestJS microservice using the TCP or RabbitMQ transport. ServerTCP#handleMessag…

    nestjs nest @nestjs/microservices npm
  • High 7.5
    CVE-2026-40879

    Nest: DoS via Recursive handleData in JsonSocket (TCP Transport)

    Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.19, when an attacker sends many small, valid JSON messages in one TCP frame, handleData() recurses once per message; the buffer shrinks each call. maxBufferSize is never…

    nestjs nest @nestjs/microservices npm