286 matches found
CVE-2025-69211
CVE-2025-69211 affects Nest.js applications using the Fastify platform integration before version 11.1.11. The issue is a bypass in the Fastify URL encoding middleware that can skip security checks implemented via NestMiddleware (via MiddlewareConsumer) or app.use(), particularly when middleware ...
PT-2025-53755
Name of the Vulnerable Software and Affected Versions Nest versions prior to 11.1.11 Description Nest is a framework used for building scalable Node.js server-side applications. A flaw exists where the Fastify URL encoding middleware can be bypassed. This impacts applications utilizing...
@apollo/gateway (>=2.10.0-alpha.0, <=2.10.3), @lenne.tech/nest-server (>=10.8.3, <=11.1.13) +2 more potentially affected by unknown CVE via @apollo/composition (>=2.10.0, <=2.10.3)
@apollo/composition NPM version =2.10.0, =2.10.0-alpha.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: unknown CVE Source advisory: OSV:GHSA-M8JR-FXQX-8XX6...
@apollo/gateway (>=2.12.0-preview.0, <=2.12.0), @lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by unknown CVE via @apollo/composition (2.12.0-preview.4)
@apollo/composition NPM version 2.12.0-preview.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/composition and may be impacted: - @apollo/gateway =2.12.0-preview.0, =11.3.0, =11.5.0 Source cves: unknown CVE Source advisory:...
@apollo/gateway (>=2.11.0-preview.0, <=2.11.4), @dfanchon/gateway (2.11.0) +1 more potentially affected by unknown CVE via @apollo/composition (>=2.11.0, <=2.11.4)
@apollo/composition NPM version =2.11.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-M8JR-FXQX-8XX6...
@apollo/gateway (>=2.12.0-preview.0, <=2.12.0), @lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by CVE-2025-64172 via @apollo/composition (2.12.0-preview.4)
@apollo/composition NPM version 2.12.0-preview.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/composition and may be impacted: - @apollo/gateway =2.12.0-preview.0, =11.3.0, =11.5.0 Source cves: CVE-2025-64172 Source advisory:...
@apollo/gateway (>=2.11.0-preview.0, <=2.11.4), @dfanchon/gateway (2.11.0) +1 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.11.0, <=2.11.4)
@apollo/composition NPM version =2.11.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: CVE-2025-64530 Source advisory: OSV:GHSA-MX7M-J9XF-62HW...
@apollo/gateway (>=2.12.0-preview.0, <=2.12.0), @lenne.tech/nest-server (>=11.3.0, <=11.5.0) potentially affected by CVE-2025-64530 via @apollo/composition (2.12.0-preview.4)
@apollo/composition NPM version 2.12.0-preview.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/composition and may be impacted: - @apollo/gateway =2.12.0-preview.0, =11.3.0, =11.5.0 Source cves: CVE-2025-64530 Source advisory:...
EUVD-2025-180051
Malicious code in biosignature-nestjs-publish-morgan npm...
MAL-2025-188679 Malicious code in phoebe-tectonophysics-nestjs-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd888d6bcb75b1377585f5ef0208e469e98c0a51f5b88bce71e7f2fa36034a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121210
Malicious code in toml-nestjs-achernar-spectron npm...
EUVD-2025-121776
Malicious code in spica-airbnb-pino-nestjs npm...
The vulnerability of the devtools-integration package of the Nest platform, which allows for the creation of scalable server applications in Node.js, enables a hacker to execute arbitrary code.
The vulnerability of the devtools-integration package for Nest’s platform, which is used to create scalable server applications in Node.js, relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
kernel: eventpoll: Fix semi-unbounded recursion
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...
EUVD-2019-14644
Malware in sbrugna...
EUVD-2019-14642
Malware in sbrugna...
EUVD-2018-4958
Malware in sbrugna...
EUVD-2019-14643
Malware in sbrugna...