Skip to content
OpenAdvisories

Vendor

nestjs

7 known vulnerabilities.

Products

nest 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-35515

    @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')

    Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters (\r, \n).…

    nestjs nest @nestjs/core npm
  • Medium 6.9
    CVE-2025-69211

    Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)

    Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses `@nestjs/platform-fastify`; relies on `NestMiddleware` (via `Mid…

    nestjs nest @nestjs/platform-fastify npm