NestJS developers will find the update from @nestjs/common version 11.0.4 to 11.0.5 a subtle but important step forward. Both versions maintain the core dependencies (uid, tslib, and iterare) and peer dependencies (rxjs, class-validator, reflect-metadata, class-transformer) ensuring compatibility within existing NestJS projects. The file count and unpacked size reported in the dist section remain identical at 397 files and 453247 unpacked size, indicating no significant changes to the overall codebase structure or included modules.
The key difference lies in the releaseDate. Version 11.0.5 was released on January 23, 2025, a single day after version 11.0.4 which was released on January 22, 2025. This close proximity suggests the newer version likely addresses minor bug fixes, performance tweaks, or documentation updates, rather than introducing substantial new features. Developers upgrading should review the official NestJS changelog for a detailed list of changes within this minor release. While the core functionality remains consistent, adopting version 11.0.5 is recommended to benefit from the latest improvements and ensure optimal stability in your NestJS applications. Keeping abreast of these incremental updates is crucial for maintaining a secure and up-to-date development environment.
All the vulnerabilities related to the version 11.0.5 of the package
nest allows a remote attacker to execute arbitrary code via the Content-Type header
File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.
