VULNERABILITY INTELLIGENCE

CVE-2026-2293

CVSS score9.8 CRITICAL

EPSS probability0.76%

CISA KEVNot currently listed

Published2026-02-27

Last modified2026-07-15

Description

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13.