NestJS is a progressive Node.js framework designed for building efficient, reliable and scalable server-side applications. The @nestjs/common package provides the fundamental building blocks for NestJS applications, offering essential decorators, classes, and utilities. Comparing versions 9.1.2 and 9.1.1, both share identical dependencies, including uuid for generating unique identifiers, tslib offering TypeScript helper functions, and iterare for advanced iteration capabilities. Similarly, the peer dependencies remain consistent, requiring rxjs for reactive programming, cache-manager for caching, class-validator for validation, reflect-metadata for dependency injection, and class-transformer for object transformation.
The key differences between the two versions lie within internal refinements and the timing of their release. Version 9.1.2 was released on September 22, 2022, while version 9.1.1 was released a few days earlier on September 19, 2022. While the file count remains the same, version 9.1.2 has a slightly larger unpacked size, suggesting potential minor code improvements, bug fixes or updates to accommodate evolved needs within the broader NestJS ecosystem. For developers, this minor version bump likely indicates increased stability or subtle feature enhancements. Because there are no breaking changes, upgrading from 9.1.1 to 9.1.2 should be seamless and enhance the overall reliability of the applications built with NestJS. Staying up-to-date with these minor versions ensures developers benefit from the latest improvements and maintain a robust application architecture.
All the vulnerabilities related to the version 9.1.2 of the package
nest allows a remote attacker to execute arbitrary code via the Content-Type header
File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.