nestjs

Products

Exploited and recent CVEs

• CVE-2026-102281 High 7.5 Nest: Remote process termination via a deeply nested microservice message pattern 0.6%
• CVE-2026-54281 High 8.7 Nest: Middleware Bypass on Fastify via Trailing Slash 0.5%
• CVE-2026-40879 High 7.5 Nest: DoS via Recursive handleData in JsonSocket (TCP Transport) 0.3%
• CVE-2026-35515 Medium 6.3 @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection') 0.2%
• CVE-2026-33011 High 8.7 Nest Fastify HEAD Request Middleware Bypass 0.4%
• CVE-2025-69211 Medium 6.9 Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU) 0.4%
• CVE-2025-54782 Critical 9.4 @nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers 47.2%