https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-31070.htmlhttps://patchthecve.com/cve/CVE-2022-31070.htmlWed, 17 Jun 2026 04:44:43 +0000MEDIUM 5.8: NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies (e.g. session cookies) from being forwarded to backend services configured by the application developer. This could have led to sensitive cookiehttps://patchthecve.com/cve/CVE-2022-31069.htmlhttps://patchthecve.com/cve/CVE-2022-31069.htmlWed, 17 Jun 2026 04:44:43 +0000MEDIUM 5.8: NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in sensitihttps://patchthecve.com/cve/CVE-2022-24718.htmlhttps://patchthecve.com/cve/CVE-2022-24718.htmlWed, 17 Jun 2026 04:32:21 +0000HIGH 7.6: ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the `svg` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this thttps://patchthecve.com/cve/CVE-2022-24717.htmlhttps://patchthecve.com/cve/CVE-2022-24717.htmlWed, 17 Jun 2026 04:32:21 +0000MEDIUM 6.1: ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageOptions)` function. While there is no know