@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

GHSA-9c5c-9qcx-q35q

osv · GHSA-9c5c-9qcx-q35q

• https://github.com/fastify/middie/security/advisories/GHSA-hx87-8wv7-pjv8
• https://github.com/nestjs/nest/security/advisories/GHSA-9c5c-9qcx-q35q
• https://github.com/nestjs/nest/pull/17737
• https://github.com/nestjs/nest/commit/5226fe084cf64b357de436f154bc89f2d319b621
• https://github.com/nestjs/nest/commit/dda252090ecb65009d9ff366444303796fc44fd7
• https://github.com/nestjs/nest
• https://github.com/nestjs/nest/releases/tag/v11.2.4
• https://github.com/nestjs/nest/releases/tag/v12.0.2

No related changes are available here.