@nestjs/common is a fundamental package for NestJS, a powerful Node.js framework designed for building scalable and maintainable server-side applications. Comparing versions 10.1.1 and 10.1.2, the most apparent change lies in the tslib dependency. Version 10.1.2 upgrades this TypeScript helper library from version 2.6.0 to 2.6.1. While seemingly minor, such updates often incorporate crucial bug fixes, performance improvements, and compatibility enhancements within the TypeScript ecosystem. Developers should evaluate tslib changelog for any breaking changes. Beyond this, both versions share identical peer dependencies, including rxjs, class-validator, reflect-metadata, and class-transformer, ensuring backward compatibility and minimizing potential conflicts within existing NestJS projects. The rest of the package characteristics remains the same, with MIT license, github repository and OpenCollective funding.
The release date of version 10.1.2 is July 25, 2023, while the release of 10.1.1 is July 24, 2023: a small patch likely to be applied seamlessly on existing projects, offering a transparent improvement with a low risk of regressions. Always consider checking the official NestJS changelog or release notes for a comprehensive overview of all changes. Upgrading to the newest version, is generally recommended to benefit from the bug fixes and improved performance.
All the vulnerabilities related to the version 10.1.2 of the package
nest allows a remote attacker to execute arbitrary code via the Content-Type header
File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.
