AIKIDO-2026-180615
@nestjs/cli is vulnerable to Path Traversal
68
Medium Risk
This Affects:
@nestjs/cliTL;DR
The Nest CLI build pipeline resolves compilerOptions.assets[].outDir, deleteOutDir targets, and tsBuildInfoFile paths without verifying they stay inside the project workspace. A malicious or misconfigured nest-cli.json or tsconfig can make nest build copy assets to, or recursively delete files in, directories outside the checkout. Before the fix, parent-directory traversal and absolute external paths were accepted. The patch resolves each destination against the project root and aborts before any copy or deletion when the path equals the root or escapes the workspace.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@nestjs/cli is vulnerable to Path Traversal in versions 7.0.0 - 11.0.21.
How to fix this
Upgrade the @nestjs/cli library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant