@nestjs/platform-fastify@11.2.2

@nestjs/platform-fastify is a Nest - modern, fast, powerful node.js web framework (@platform-fastify)

Affected versions of this package are vulnerable to Interpretation Conflict via absolute-form request targets in the Fastify adapter's middleware registration. When a request is made using an absolute-form request target (e.g., GET http://host/path), Fastify routes the request to the handler while path-scoped middleware - which matches against the raw request target - never runs. An attacker can send requests using absolute-form targets to bypass any middleware-enforced security controls such as authentication, authorization, or rate limiting.

Upgrade @nestjs/platform-fastify to version 11.2.4, 12.0.2 or higher.