3.7
Faible
CVE-2023-26108 Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe
Description
Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| @nestjs/core 9.0 | premières → < 9.0.5 | 9.0.5 |