npm/@nestjs/platform-fastify: high 7.4
@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets
Action: Upgrade @nestjs/platform-fastify to 11.2.4 or later.
npm i @nestjs/platform-fastify@11.2.4npm i @nestjs/platform-fastify@12.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.2.4 | - |
| 12.0.0 | 12.0.2 | - |
Fixed versions
| 11.2.4 | 12.0.2 |
Sources
- osv: GHSA-9c5c-9qcx-q35q
- https://github.com/fastify/middie/security/advisories/GHSA-hx87-8wv7-pjv8
- https://github.com/nestjs/nest/security/advisories/GHSA-9c5c-9qcx-q35q
- https://github.com/nestjs/nest/pull/17737
- https://github.com/nestjs/nest/commit/5226fe084cf64b357de436f154bc89f2d319b621
- https://github.com/nestjs/nest/commit/dda252090ecb65009d9ff366444303796fc44fd7
- https://github.com/nestjs/nest
- https://github.com/nestjs/nest/releases/tag/v11.2.4
- https://github.com/nestjs/nest/releases/tag/v12.0.2
published · modified · JSON