Known vulnerabilities in nest

Vendor: nestjs
Software: nest
Software CPE: cpe:2.3:a:nestjs:nest:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nest nest is affected by 8 known vulnerabilities: 1 high, 6 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134473 - Incorrect Authorization
CVE-2026-54281
CWE-863 Medium
No
No
11.1.24 12.06.2026 SB2026061274
#VU125898 - Uncontrolled Recursion
CVE-2026-40879
CWE-674 Medium
No
No
11.1.19 14.04.2026 SB2026041447
#VU125028 - Improper Access Control
CVE-2026-2293
CWE-284 Medium
No
No
11.1.14 07.04.2026 SB2026040730
#VU125027 - Improper Access Control
CVE-2026-33011
CWE-284 Medium
No
No
11.1.16 07.04.2026 SB2026040731
#VU125025 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-35515
CWE-74 Medium
No
No
11.1.18 07.04.2026 SB2026040728
#VU121159 - Resource exhaustion
CVE-2025-15284
CWE-400 Medium
No
No
10.4.21 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 36 more
#VU120626 - Improper input validation
CVE-2025-69211
CWE-20 High
No
No
11.1.11 29.12.2025 SB2025122946
#VU111977 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-29409
CWE-94 Low
No
No
10.3.3 26.06.2025 SB2025062651
SB2025063009
SB2025082202
and 1 more