Nestjs Nest vulnerabilities

• nestjs nest Nest: Remote process termination via a deeply nested microservice message pattern CVE-2026-102281 Fix available 7.5 HighSeptember 28, 2026
• google nest, nest wifi point firmware, nest wifi pro firmware +1 more +3 more Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker... CVE-2025-36939 10.0 CriticalAugust 24, 2026
• nestjs nest Nest: Middleware Bypass on Fastify via Trailing Slash CVE-2026-54281 Fix available 8.7 HighJune 15, 2026
• nestjs nest Nest: DoS via Recursive handleData in JsonSocket (TCP Transport) CVE-2026-40879 Fix available 7.5 HighApril 14, 2026
• nestjs nest @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-35515 Fix available 6.3 MediumApril 6, 2026
• nestjs nest Nest Fastify HEAD Request Middleware Bypass CVE-2026-33011 Fix available 8.7 HighMarch 17, 2026
• nest.js, nestjs nest, red hat developer hub +1 more +3 more NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass CVE-2026-2293 Fix available 8.2 HighFebruary 27, 2026
• nestjs nest Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU) CVE-2025-69211 Fix available 6.9 MediumDecember 29, 2025
• nestjs devtools-integration, nest +1 more @nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers CVE-2025-54782 Public exploitFix available EPSS 47.2% 9.4 CriticalAugust 1, 2025
• nestjs nest nest allows a remote attacker to execute arbitrary code via the Content-Type header CVE-2024-29409 Fix available 5.5 MediumMarch 14, 2025
• nestjs nest @nestjs/core vulnerable to Information Exposure via StreamableFile pipe CVE-2023-26108 Fix available 3.7 LowMarch 6, 2023