nest allows a remote attacker to execute arbitrary code via the Content-Type header

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-29409 · ADVISORY
• nestjs/nest · WEB
• nestjs/nest · WEB
• nestjs/nest · WEB
• nestjs/nest#14881 · WEB
• gist.github.com/aydinnyunus/801342361584d1491c67a820a714f53f · WEB
• nestjs/nest · PACKAGE
• nestjs/nest · WEB
• nestjs/nest release v10.4.16 · WEB
• nestjs/nest release v11.0.16 · WEB

nest のその他の脆弱性

• CVE-2026-40879高 7.5Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.19, when an attacker sends many small, valid JSON …
• CVE-2026-35515中 6.1Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.ty…
• CVE-2026-33011高 7.5Nest is a framework for building scalable Node.js server-side applications. In versions 11.1.15 and below, a NestJS application using @nestj…
• CVE-2026-2293緊急 9.8A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalizat…
• CVE-2025-69211高 7.4Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware…