CVE-2024-29409

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header...

CVE-2024-29409

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header...

CVE-2024-29409

CVE-2024-29409 : The IBM NOI bulletin confirms a file-upload vulnerability in NestJS Nest v10.3.2 where arbitrary code execution is possible via the Content-Type header, i.e., a remote attacker can exploit a crafted upload request that abuses Content-Type handling. The document does not provide r...

CVE-2024-29409

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header...

PT-2025-11294

Name of the Vulnerable Software and Affected Versions: nestjs nest version 10.3.2 Description: The issue allows a remote attacker to execute arbitrary code via the Content-Type header. This is a result of a File Upload vulnerability. Recommendations: For version 10.3.2, consider restricting acces...

CVE-2024-29409

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header...

Information Exposure

@nestjs/common, is vulnerable to information exposure. The vulnerability exists due to a lack of client request sanitization in the streamable-file.ts file, allowing an attacker to read sensitive information in the system through the DVI element...

CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

Open redirect

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

CVE-2023-26108

CVE-2023-26108 affects the NestJS framework component @nestjs/core when running versions prior to 9.0.5 . The vulnerability enables information exposure via the StreamableFile pipe if a client cancels a request while streaming; the underlying stream remains open, potentially leaking data. Connect...

PT-2023-20495 · Nestjs · @Nestjs/Core

Name of the Vulnerable Software and Affected Versions: @nestjs/core versions prior to 9.0.5 Description: The issue allows for Information Exposure via the StreamableFile pipe. This can be exploited when a client cancels a request while streaming a StreamableFile, resulting in the stream wrapped b...

nestjs 安全漏洞

nestjs is nestjs' progressive Node.js framework for building efficient, scalable, and enterprise-class server-side applications on top of TypeScript and JavaScript. A security vulnerability exists in versions of nestjs prior to 9.0.5 that stems from exposing information through the StreamableFile...

MAL-2022-3210 Malicious code in freekws-devportal-api-client-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6844a713c19484257db4a41fa914be2ee9dd774feb1dcec5698ce8fdb776066f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in freekws-devportal-api-client-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6844a713c19484257db4a41fa914be2ee9dd774feb1dcec5698ce8fdb776066f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nestjs-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 712dfba5f6483ec5b01dbe91ce2b407887542d9cc9588955146a3970ec6097fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4802 Malicious code in nestjs-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 712dfba5f6483ec5b01dbe91ce2b407887542d9cc9588955146a3970ec6097fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nestjs-ldap-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65363e22ae6934a381048355dec14bb6b668cfc1d21b311be5ed9d15cd12bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4801 Malicious code in nestjs-ldap-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65363e22ae6934a381048355dec14bb6b668cfc1d21b311be5ed9d15cd12bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...