Skip to content
Nestjs vulnerabilities
Newest
-
nestjs nest
Nest: Remote process termination via a deeply nested microservice message pattern
CVE-2026-102281
Fix available
7.5 High
-
google nest, nest wifi point firmware, nest wifi pro firmware +1 more +3 more
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker...
CVE-2025-36939
10.0 Critical
-
nestjs nest
Nest: Middleware Bypass on Fastify via Trailing Slash
CVE-2026-54281
Fix available
8.7 High
-
nestjs nest
Nest: DoS via Recursive handleData in JsonSocket (TCP Transport)
CVE-2026-40879
Fix available
7.5 High
-
nestjs nest
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-35515
Fix available
6.3 Medium
-
nestjs nest
Nest Fastify HEAD Request Middleware Bypass
CVE-2026-33011
Fix available
8.7 High
-
nest.js, nestjs nest, red hat developer hub +1 more +3 more
NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass
CVE-2026-2293
Fix available
8.2 High
-
nestjs nest
Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)
CVE-2025-69211
Fix available
6.9 Medium
-
nestjs devtools-integration, nest +1 more
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers
CVE-2025-54782
Public exploitFix available
EPSS 47.2%
9.4 Critical
-
nestjs nest
nest allows a remote attacker to execute arbitrary code via the Content-Type header
CVE-2024-29409
Fix available
5.5 Medium
-
nestjs nest
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
CVE-2023-26108
Fix available
3.7 Low