Security Advisory

CVE-2026-2293

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-27 16:15:11
Last updated 2026-07-15 01:18:54
Assigner Fluid Attacks
CVSS score 8.2
State PUBLISHED

Description

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.