CVE-2026-2293

9.8

CRITICALCVSS v3

Published

February 27, 2026

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.

nestjs/nest

GitHubA progressive Node.js framework for building efficient, scalable, and enterprise-grade server-side applications with TypeScript/JavaScript 🚀

= 11.1.13NVD

nest

Python Package IndexNeST: Network Stack Tester

= 11.1.13NVD

NEST

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Strongly typed interface to Elasticsearch. Fluent and classic object initializer mappings of requests and responses. Uses and exposes Elasticsearch.Net.

= 11.1.13NVD