nest vulnerabilities
CVEs whose affected-version data names the nest package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102281High· 7.5PoCNest is a framework for building scalable Node.js server-side applications
Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate a NestJS microservice using the TCP or RabbitMQ transport. …
▾ Midnightnestjs · nestEPSS 0.59%via NVD
CVE-2025-69211High· 7.4Nest is a framework for building scalable Node.js server-side applications
Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses `@nestjs/platform-fastify`; relies on `Nes…
▾ Twilightnestjs · nestEPSS 0.38%via NVD