CVE-2026-40879 | nestjs nest up to 11.1.18 JSON Message handleData recursion (GHSA-hpwf-8g29-85qm)

April 21, 2026 Yanac

A vulnerability categorized as problematic has been discovered in nestjs nest up to 11.1.18. Affected by this issue is the function handleData of the component JSON Message Handler. The manipulation results in uncontrolled recursion.

This vulnerability is known as CVE-2026-40879. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More