CVE-2026-2293
1 advisory.
npm/@nestjs/platform-fastify CVE-2026-2293: high
Nest has a Fastify URL Encoding Middleware Bypass
Action: Upgrade @nestjs/platform-fastify to 11.1.14 or later.
npm i @nestjs/platform-fastify@11.1.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.1.14 | - |
Fixed versions
| 11.1.14 |
Sources
- osv: GHSA-r4wm-x892-vjmx
- https://github.com/nestjs/nest/security/advisories/GHSA-r4wm-x892-vjmx
- https://nvd.nist.gov/vuln/detail/CVE-2026-2293
- https://github.com/nestjs/nest/commit/fd8d073e0e048b185147209338ca7042e52c10ba
- https://fluidattacks.com/advisories/neton
- https://github.com/nestjs/nest
- https://github.com/nestjs/nest/releases/tag/v11.1.14
CVE-2026-2293 · published · modified · JSON