Node.js Framework Vulnerability in NestJS by Nest

CVE-2025-69211

What is CVE-2025-69211?

Nest, a framework for building scalable Node.js applications, is affected by a vulnerability that allows for a Fastify URL encoding middleware bypass in applications using the @nestjs/platform-fastify package. This vulnerability can be exploited if security checks such as authentication and authorization rely on NestMiddleware via MiddlewareConsumer, or if middleware is applied to specific routes. Attackers may gain access to restricted administrative endpoints or protected routes, thus allowing unauthenticated users to access sensitive areas of the application. This flaw, which bypasses essential middleware sanitization or validation, is patched in version @nestjs/platform-fastify@11.1.11. For more details, refer to the security advisory at the official GitHub repository.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References