nest-admin vulnerabilities

CVEs whose affected-version data names the nest-admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117564Critical· 9.8

6d ago

nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the …

▾ Midnightbuqiyuan · nest-adminEPSS 0.60%via CVEORG