npm/@nestjs/platform-fastify CVE-2026-33011: high, EPSS 0.35%

Nest Fastify HEAD Request Middleware Bypass

Action: Upgrade @nestjs/platform-fastify to 11.1.16 or later.

npm i @nestjs/platform-fastify@11.1.16

Affected

Fixed versions

Sources

• osv: GHSA-wf42-42fg-fg84
• https://github.com/nestjs/nest/security/advisories/GHSA-wf42-42fg-fg84
• https://nvd.nist.gov/vuln/detail/CVE-2026-33011
• https://github.com/nestjs/nest/commit/cbdf737cd6e7cefa52d05ecea2ae4af95c464614
• https://github.com/nestjs/nest
• https://github.com/nestjs/nest/releases/tag/v11.1.17

CVE-2026-33011 · published 2026-03-17T18:38:38Z · modified 2026-03-20T21:37:35.417540Z · JSON