p PatchFirst

CVE-2024-29409

CVE-2024-29409

This page contains facts from public vulnerability sources. Check the original advisory before updating.

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.

CVSS 5.5 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • @nestjs/common npm

    Affected ranges
    • SEMVER: ≥ 11.0.0-next.1, < 11.0.16

    Update to 11.0.16

  • @nestjs/common npm

    Affected ranges
    • SEMVER: < 10.4.16

    Update to 10.4.16

Original sources

Check your server →