CVE-2026-35515Published
Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline c…
Exact source revision recorded 27 Oct 2026 09:03:12 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-35515 · Microsoft / collected KEV context
nvd · CVE-2026-35515
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.