Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/03/06 6:30 a.m.37 views

@nestjs/core vulnerable to Information Exposure via StreamableFile pipe

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

5.3CVSS5.4AI score0.00707EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/06 5:0 a.m.10 views

CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

3.7CVSS7AI score0.00707EPSS
SaveExploits1References4
Rows per page
Query Builder