2 matches found
CVE-2025-69211: Time-of-check Time-of-use (TOCTOU) Race Condition
Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses @nestjs/platform-fastify; relies on NestMiddleware via MiddlewareConsumer for security checks...
9.1CVSS5.8AI score0.00382EPSS
SaveExploits1References4
PT-2025-53755
Name of the Vulnerable Software and Affected Versions Nest versions prior to 11.1.11 Description Nest is a framework used for building scalable Node.js server-side applications. A flaw exists where the Fastify URL encoding middleware can be bypassed. This impacts applications utilizing...
9.1CVSS5.8AI score0.00382EPSS
SaveExploits1References12
20