Nest Affected by DoS via Recursive handleData in JsonSocket (TCP Transport)

Description

References

• nestjs/nest security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-40879 · ADVISORY
• nestjs/nest · PACKAGE

nest 的其他漏洞

• CVE-2026-35515中危 6.1Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.ty…
• CVE-2026-33011高危 7.5Nest is a framework for building scalable Node.js server-side applications. In versions 11.1.15 and below, a NestJS application using @nestj…
• CVE-2026-2293严重 9.8A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalizat…
• CVE-2025-69211高危 7.4Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware…
• CVE-2024-29409中危 5.5File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.