CVE-2023-26108

3.7

LOWCVSS v3

Published

March 6, 2023

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.

nestjs/nest

GitHubA progressive Node.js framework for building efficient, scalable, and enterprise-grade server-side applications with TypeScript/JavaScript 🚀

< 9.0.5NVD

nest

Python Package IndexNeST: Network Stack Tester

< 9.0.5NVD

NEST

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Strongly typed interface to Elasticsearch. Fluent and classic object initializer mappings of requests and responses. Uses and exposes Elasticsearch.Net.

< 9.0.5NVD