CNNVD-202512-4959 Information
Dec 29, 2025
cve
CNNVD ID
CNNVD-202512-4959
Related CVE
- CNNVD Published: 2025-12-29
Description (Chinese)
nest是nestjs开源的一个 Node.js 框架，用于使用 TypeScript/JavaScript 构建高效、可扩展和企业级的服务器端应用程序。 nest 11.1.11之前版本存在安全漏洞，该漏洞源于Fastify URL编码中间件存在绕过，可能导致未经验证的用户访问受保护路由。
Description (English)
Nest is a Node.js framework for the use of TypeScript/JavaScript to construct efficient, scalable and enterprise-level server-end applications. There was a security loophole in the pre-nest 11.1.11 version, which stemmed from the existence of a bypass of the intermediate of the Fastify URL code, which could lead to uncertified users accessing protected routes.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
nestjs
Published
2025-12-29
Last Modified
2026-02-24
References
https://github.com/nestjs/nest/commit/c4cedda15a05aafec1e6045b36b0335ab850e771 https://github.com/nestjs/nest/security/advisories/GHSA-8wpr-639p-ccrj
Patch
https://github.com/nestjs/nest/releases
Share on: