Vulnerability	Vulnerable Version
C Interpretation Conflict @nestjs/platform-fastify is a Nest - modern, fast, powerful node.js web framework (@platform-fastify) Affected versions of this package are vulnerable to Interpretation Conflict via absolute-form request targets in the Fastify adapter's middleware registration. When a request is made using an absolute-form request target (e.g., `GET http://host/path`), Fastify routes the request to the handler while path-scoped middleware - which matches against the raw request target - never runs. An attacker can send requests using absolute-form targets to bypass any middleware-enforced security controls such as authentication, authorization, or rate limiting. How to fix Interpretation Conflict? Upgrade `@nestjs/platform-fastify` to version 11.2.4, 12.0.2 or higher.	<11.2.4>=12.0.0 <12.0.2

Interpretation Conflict

@nestjs/platform-fastify is a Nest - modern, fast, powerful node.js web framework (@platform-fastify)

Affected versions of this package are vulnerable to Interpretation Conflict via absolute-form request targets in the Fastify adapter's middleware registration. When a request is made using an absolute-form request target (e.g., GET http://host/path), Fastify routes the request to the handler while path-scoped middleware - which matches against the raw request target - never runs. An attacker can send requests using absolute-form targets to bypass any middleware-enforced security controls such as authentication, authorization, or rate limiting.

How to fix Interpretation Conflict?

Upgrade @nestjs/platform-fastify to version 11.2.4, 12.0.2 or higher.

<11.2.4>=12.0.0 <12.0.2

Go back to all versions of this package