NestJS developers will find the jump from version 9.3.7 to 9.3.8 of the @nestjs/common package a relatively small, but potentially important, update. The core description, dependencies on uid, tslib, and iterare, peer dependencies like rxjs, cache-manager, class-validator, reflect-metadata, and class-transformer, license, repository, author, and funding details remain entirely consistent between the two releases. This suggests no fundamental changes or breaking updates to the API or core functionality. The primary difference lies in the dist section, specifically the unpackedSize which increases slightly from 422524 to 422684, a marginal jump of 160 bytes. While seemingly insignificant, this size difference could indicate minor bug fixes, performance improvements, or very small feature additions that don't warrant a major or minor version bump. Crucially, the releaseDate shows version 9.3.8 was published February 10th, 2023, roughly two days after 9.3.7 (February 8th, 2023). Given the very short timeframe, developers should consider updating to 9.3.8 for the latest patches and potential stability enhancements. While there are no explicit release notes provided in the data, the updated version likely constitutes a minor improvement on the previous one. Keeping the library up-to-date ensures optimal performance and compatibility within your NodeJS NestJS applications.
All the vulnerabilities related to the version 9.3.8 of the package
nest allows a remote attacker to execute arbitrary code via the Content-Type header
File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.