CVE-2026-2293

Publication date

2026-02-27 16:15:11

Family

Fluid Attacks

State

PUBLISHED

Description

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.