Skip to content
OpenAdvisories

Package · npm

@nestjs/platform-fastify

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.4
    GHSA-9c5c-9qcx-q35q

    @nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets

    | Field | Value | | --- | --- | | Ecosystem | npm | | Package | `@nestjs/platform-fastify` | | Affected versions | `>= 12.0.0, < 12.0.2` and `< 11.2.4` | | Patched versions | `12.0.2` and `11.2.4` (upgrade to `12.0.3` / `11.2.5`) | ### Summary On the Fastify …

    @nestjs/platform-fastify npm
  • High 8.7
    CVE-2026-54281

    Nest: Middleware Bypass on Fastify via Trailing Slash

    Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.24, an authentication bypass vulnerability exists in @nestjs/platform-fastify. When middleware is registered through NestJS's MiddlewareConsumer.forRoutes() API on the F…

    nestjs nest @nestjs/platform-fastify npm
  • High 8.7
    CVE-2026-33011

    Nest Fastify HEAD Request Middleware Bypass

    Nest is a framework for building scalable Node.js server-side applications. In versions 11.1.15 and below, a NestJS application using @nestjs/platform-fastify GET middleware can be bypassed because Fastify automatically redirects HEAD requests to the correspo…

    nestjs nest @nestjs/platform-fastify npm
  • High 8.2
    CVE-2026-2293

    NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass

    A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.

    nestjs nest.js @nestjs/platform-fastify npm