@nestjs/core vulnerabilities (npm)

2 vulnerabilities.

• @nestjs/core npm @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-35515 Fix available 6.3 MediumApril 6, 2026
• @nestjs/core npm @nestjs/core vulnerable to Information Exposure via StreamableFile pipe CVE-2023-26108 Fix available 3.7 LowMarch 6, 2023