Filtered by vendor Nestjs Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-29409 1 Nestjs 1 Nest 2025-04-03 5.5 Medium
File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.
CVE-2023-26108 1 Nestjs 1 Nest 2025-03-05 3.7 Low
Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.