NE
Product
nest
by nestjs · last CVE Sep 28, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 3Low 0
Watch

Add nest to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35515
6.1
0%
Apr 7
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
Affected: < 11.1.18
CVE-2024-29409
5.5
0%
Mar 14
File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header
Affected: 10.3.2
CVE-2023-26108
5.3
1%
Mar 6
Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe
Affected: before 9.0.5
Showing 3