Security Advisory

CVE-2026-2293

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-27 16:15:11
Last updated 2026-02-27 17:07:59
Assigner Fluid Attacks
State PUBLISHED

Description

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.