Filtered by vendor Nestjs
Subscribe
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-29409 | 1 Nestjs | 1 Nest | 2025-04-03 | N/A | 5.5 MEDIUM |
| File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header. | |||||
| CVE-2023-26108 | 1 Nestjs | 1 Nest | 2024-11-21 | N/A | 3.7 LOW |
| Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open. | |||||