@gleb216/fn.nestjs.core.modules (>=0.0.87, <=0.0.93), @haulsuite/livehaul-sdk (>=0.0.1, <=1.0.0) +17 more potentially affected by CVE-2023-26108 via @nestjs/core (>=9.0.0, <=9.0.4)

@nestjs/core NPM version =9.0.0, =0.0.87, =0.0.1, =0.1.0, =9.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.8, =4.49.1-test.3, =0.6.0, =0.0.13, =0.1.7, =0.4.0 - nestjs-eclih 0.0.15 and more Source cves: CVE-2023-26108 Source advisory: OSV:GHSA-4JPV-8R57-PV7J...

CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

CVE-2023-26108

CVE-2023-26108 affects the NestJS framework component @nestjs/core when running versions prior to 9.0.5 . The vulnerability enables information exposure via the StreamableFile pipe if a client cancels a request while streaming; the underlying stream remains open, potentially leaking data. Connect...

@gleb216/fn.nestjs.core.modules (>=0.0.87, <=0.0.93), @haulsuite/livehaul-sdk (>=0.0.1, <=1.0.0) +17 more potentially affected by CVE-2023-26108 via @nestjs/core (>=9.0.0, <=9.0.4)

@nestjs/core NPM version =9.0.0, =0.0.87, =0.0.1, =0.1.0, =9.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.8, =4.49.1-test.3, =0.6.0, =0.0.13, =0.1.7, =0.4.0 - nestjs-eclih 0.0.15 and more Source cves: CVE-2023-26108 Source advisory: SNYK:JS-NESTJSCORE-2869127...