Nest.js vulnerabilities
We track 1 vulnerability in Nest.js products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Nest.js vulnerabilities
- 9.8 Critical severity
nest.js: Incorrect Authorization
A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.