@nestjs/microservices vulnerabilities (npm)

2 vulnerabilities.

• @nestjs/microservices npm Nest: Remote process termination via a deeply nested microservice message pattern CVE-2026-102281 Fix available 7.5 HighSeptember 28, 2026
• @nestjs/microservices npm Nest: DoS via Recursive handleData in JsonSocket (TCP Transport) CVE-2026-40879 Fix available 7.5 HighApril 14, 2026