Skip to content

fix(deps): update dependency @nestjs/common to v10.4.16 [security]#881

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-nestjs-common-vulnerability
Open

fix(deps): update dependency @nestjs/common to v10.4.16 [security]#881
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-nestjs-common-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 15, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@nestjs/common (source) 10.2.10 → 10.4.16 age adoption passing confidence

nest allows a remote attacker to execute arbitrary code via the Content-Type header

CVE-2024-29409 / GHSA-cj7v-w2c7-cp7c

More information

Details

File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.

Severity

  • CVSS Score: 5.5 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

nestjs/nest (@​nestjs/common)

v10.4.16

Compare Source

What's Changed

Full Changelog: nestjs/nest@v10.4.15...v10.4.16

v10.4.15

Compare Source

v10.4.15 (2024-12-09)

Dependencies

v10.4.14

Compare Source

v10.4.13

Compare Source

v10.4.13 (2024-12-03)

Bug fixes
Dependencies
Committers: 3

v10.4.12

Compare Source

v10.4.12 (2024-11-29)

Bug fixes
Dependencies
Committers: 1

v10.4.11

Compare Source

v10.4.10

Compare Source

v10.4.10 (2024-11-27)

Bug fixes
  • platform-socket.io, websockets
Dependencies
Committers: 1

v10.4.9

Compare Source

v10.4.9 (2024-11-25)

Bug fixes
Enhancements
Dependencies
Committers: 7

v10.4.8

Compare Source

v10.4.8 (2024-11-15)

Bug fixes
Enhancements
Committers: 3

v10.4.7

Compare Source

v10.4.6

Compare Source

v10.4.5

Compare Source

v10.4.5 (2024-10-16)

Dependencies
Committers: 5

v10.4.4

Compare Source

v10.4.3

Compare Source

v10.4.2

Compare Source

v10.4.2 (2024-09-16)

Dependencies
Committers: 3

v10.4.1

Compare Source

v10.4.0

Compare Source

v10.3.10

Compare Source

v10.3.10 (2024-07-01)

Bug fixes
Enhancements
  • platform-fastify
Dependencies
Committers: 4

v10.3.9

Compare Source

v10.3.9 (2024-06-03)

Bug fixes
Enhancements
Docs
Dependencies

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label Apr 15, 2025
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from bc69d08 to 61aa366 Compare December 31, 2025 15:16
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from 61aa366 to 77a6431 Compare January 19, 2026 16:36
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from 77a6431 to 8240e7c Compare February 2, 2026 16:31
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from 8240e7c to c3b4d6e Compare February 12, 2026 12:08
@renovate renovate Bot changed the title fix(deps): update dependency @nestjs/common to v10.4.16 [security] fix(deps): update dependency @nestjs/common to v10.4.16 [security] - autoclosed Mar 27, 2026
@renovate renovate Bot closed this Mar 27, 2026
@renovate renovate Bot deleted the renovate/npm-nestjs-common-vulnerability branch March 27, 2026 01:40
@renovate renovate Bot changed the title fix(deps): update dependency @nestjs/common to v10.4.16 [security] - autoclosed fix(deps): update dependency @nestjs/common to v10.4.16 [security] Mar 30, 2026
@renovate renovate Bot reopened this Mar 30, 2026
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch 2 times, most recently from c3b4d6e to 713ea14 Compare March 30, 2026 21:23
@renovate renovate Bot changed the title fix(deps): update dependency @nestjs/common to v10.4.16 [security] fix(deps): update dependency @nestjs/common to v10.4.16 [security] - autoclosed Apr 27, 2026
@renovate renovate Bot closed this Apr 27, 2026
@renovate renovate Bot changed the title fix(deps): update dependency @nestjs/common to v10.4.16 [security] - autoclosed fix(deps): update dependency @nestjs/common to v10.4.16 [security] Apr 27, 2026
@renovate renovate Bot reopened this Apr 27, 2026
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch 3 times, most recently from 79e03a8 to 0422ea4 Compare April 29, 2026 20:11
@renovate renovate Bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from 0422ea4 to 86738c3 Compare May 12, 2026 10:33
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 12, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Progress: resolved 1, reused 0, downloaded 0, added 0
[WARN] deprecated eslint@8.54.0: This version is no longer supported. Please see https://eslint.org/version-support for other options.
[WARN] deprecated uuid@10.0.0: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
Progress: resolved 119, reused 0, downloaded 0, added 0
Progress: resolved 138, reused 0, downloaded 0, added 0
Progress: resolved 372, reused 0, downloaded 0, added 0
[ERR_PNPM_NO_MATCHING_VERSION] No matching version found for has@1.0.29 while fetching it from https://registry.npmjs.org/

This error happened while installing the dependencies of @innei/eslint-config-ts@0.11.1
 at eslint-plugin-import@2.28.1

The latest release of has is "1.0.4".

If you need the full list of all 6 published versions run "pnpm view has versions".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants