Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-69211 · Microsoft / collected KEV context

EUVD-2025-205611

GHSA-8wpr-639p-ccrj

cve-program · CVE-2025-69211

• https://github.com/nestjs/nest/security/advisories/GHSA-8wpr-639p-ccrj
• https://github.com/nestjs/nest/commit/c4cedda15a05aafec1e6045b36b0335ab850e771

euvd · EUVD-2025-205611

• https://github.com/nestjs/nest/security/advisories/GHSA-8wpr-639p-ccrj
• https://github.com/nestjs/nest/commit/c4cedda15a05aafec1e6045b36b0335ab850e771

nvd · CVE-2025-69211

• https://github.com/nestjs/nest/commit/c4cedda15a05aafec1e6045b36b0335ab850e771
• https://github.com/nestjs/nest/security/advisories/GHSA-8wpr-639p-ccrj

osv · GHSA-8wpr-639p-ccrj

• https://github.com/nestjs/nest/security/advisories/GHSA-8wpr-639p-ccrj
• https://nvd.nist.gov/vuln/detail/CVE-2025-69211
• https://github.com/nestjs/nest/commit/c4cedda15a05aafec1e6045b36b0335ab850e771
• https://github.com/nestjs/nest

No related operational record is retained in the current change model.