Live data from GitHub and npm, updated daily.
Data last fetched: 2026-05-15
2 active CVEs reported via OSV.dev
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
Get SLA-backed support, security patches, and direct access to senior engineers for NestJS — without relying on volunteer maintainers.
Talk to an Expert →