{"action":"Upgrade @nestjs/platform-fastify to 11.1.16 or later.","affected":[{"fixed":"11.1.16","introduced":"0"}],"component":"@nestjs/platform-fastify","cve_ids":["CVE-2026-33011"],"ecosystem":"npm","epss":0.00352,"exploited":false,"fixed_versions":["11.1.16"],"ghsa_id":"GHSA-wf42-42fg-fg84","id":"tcs_01M5KGETJMWE3PQGN4736NHPRE","modified_at":"2026-03-20T21:37:35.417540Z","published_at":"2026-03-17T18:38:38Z","references":["https://osv.dev/vulnerability/GHSA-wf42-42fg-fg84","https://github.com/nestjs/nest/security/advisories/GHSA-wf42-42fg-fg84","https://nvd.nist.gov/vuln/detail/CVE-2026-33011","https://github.com/nestjs/nest/commit/cbdf737cd6e7cefa52d05ecea2ae4af95c464614","https://github.com/nestjs/nest","https://github.com/nestjs/nest/releases/tag/v11.1.17"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wf42-42fg-fg84","url":"https://osv.dev/vulnerability/GHSA-wf42-42fg-fg84"},{"source":"nvd","source_id":"CVE-2026-33011","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33011"}],"summary":"Nest Fastify HEAD Request Middleware Bypass"}