Vulnerabilities in nestjs

6 results

Vexday analysis

NestJS apresenta 6 vulnerabilidades catalogadas, com 1 crítica (CVSS alto) e nenhuma sob ataque ativo no momento. A fraqueza dominante é CWE-352 (Cross-Site Request Forgery), indicando risco de manipulação de requisições; destaque para 1 vulnerabilidade publicada nos últimos 90 dias, sinalizando exposição recente que demanda atenção.

CVE-2025-54782CRITICAL@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS DevelopersEPSS 48.3%CVE-2026-54281HIGHNest: Middleware Bypass on Fastify via Trailing SlashEPSS 0.5%CVE-2025-69211MEDIUMNest has a Fastify URL Encoding Middleware Bypass (TOCTOU)EPSS 0.4%CVE-2026-33011HIGHNest Fastify HEAD Request Middleware BypassEPSS 0.3%CVE-2026-40879HIGHNest: DoS via Recursive handleData in JsonSocket (TCP Transport)EPSS 0.3%CVE-2026-35515MEDIUM@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')EPSS 0.2%