nestjs @nestjs/common vulnerabilities

Latest nestjs @nestjs/common CVEs

Newest publication first

1. CVE-2024-29409 nest allows a remote attacker to execute arbitrary code via the Content-Type header

   Published 2025-03-14

   Medium·CVSS 5.5 EPSS 0.34%

   File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.