@nestjs/common

12.2.0 · 19 Oct 2026MIT9.6M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @nestjs/common. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	12.2.0	No known advisory
	11.2.7	Safe from 11.0.16
	10.4.22	Safe from 10.4.16
	9.4.3	9 open advisories, worst moderate · last release Jun 2023, no longer updated

Your version

Moderate
nest allows a remote attacker to execute arbitrary code via the Content-Type headerGHSA-cj7v-w2c7-cp7c · 14 Mar 2025
- 11.x11.0.0 – 11.0.15Fixed in 11.0.16
- 10.x10.0.0 – 10.4.15Fixed in 10.4.16
- 9.x and older1.0.0 – 9.4.3No fix, no longer updated · move to 10.4.16

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.