Filtered by vendor Nestjs Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-26108 1 Nestjs 1 Nest 2024-08-02 3.7 Low
Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.