Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-13113
  • npm/bpm-foundation-nest-keycloak-connect
 Malicious code in bpm-foundation-nest-keycloak-connect (npm) 05 Aug
  • No fix available
CVE-2026-54281
  • github.com/nestjs/nest
 Nest: Middleware Bypass on Fastify via Trailing Slash 22 Jun
  • Fix available
  • Severity - 8.7 (High)
MAL-2026-4131
  • npm/canvas-nest.js
 Malicious code in canvas-nest.js (npm) 19 May
  • No fix available
CVE-2026-40879
  • github.com/nestjs/nest
 Nest: DoS via Recursive handleData in JsonSocket (TCP Transport) 21 Apr
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-35515
  • github.com/nestjs/nest
 @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection') 07 Apr
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-33011
  • github.com/nestjs/nest
 Nest Fastify HEAD Request Middleware Bypass 20 Mar
  • Fix available
  • Severity - 8.7 (High)
MAL-2026-1445
  • npm/nest-moralis
 Malicious code in nest-moralis (npm) 16 Mar
  • No fix available
CVE-2026-2293
  • github.com/nestjs/nest
 NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass 27 Feb
  • Fix available
  • Severity - 8.2 (High)
CVE-2025-69211
  • github.com/nestjs/nest
 Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU) 29 Dec 2025
  • Fix available
  • Severity - 6.9 (Medium)
MAL-2025-45236
  • npm/mountain-nest-range
 Malicious code in mountain-nest-range (npm) 05 Sep 2025
  • No fix available
CVE-2024-29409
  • github.com/nestjs/nest
 See record for full details 14 Mar 2025
  • No fix available
  • Severity - 5.5 (Medium)
MAL-2025-2114
  • npm/link-outside-nest
 Malicious code in link-outside-nest (npm) 04 Mar 2025
  • No fix available
CVE-2023-26108
  • github.com/nestjs/nest
 See record for full details 06 Mar 2023
  • Fix available
  • Severity - 3.7 (Low)
MAL-2023-7996
  • npm/@pagseguro/nest
 Malicious code in @pagseguro/nest (npm) 23 Feb 2023
  • No fix available
MGASA-2022-0323
  • Mageia:8/jupyter-notebook
  • Mageia:8/python-nest-asyncio
  • Mageia:8/python-send2trash
 Updated jupyter-notebook packages fix security vulnerability 10 Sep 2022
  • Fix available