Skip to content
Threat Feed
Subscribe

Product

@Nestjs/Platform-Fastify (< 11.2.4)

1 brief RSS
high threat

Path-Scoped Middleware Bypass in @nestjs/platform-fastify

An improper handling of absolute-form HTTP request targets in @nestjs/platform-fastify allows attackers to bypass path-scoped middleware by inducing a path resolution mismatch between the router and the middleware layer.

exploited @nestjs/platform-fastify +1 middleware-bypass web-application-security nestjs fastify npm
2t