Securitysshole: password bypass in Alpine’s OpenSSH

@nestjs/core@12.4.0

Safe to upgrade.

Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.

Why this verdict

  • Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.Evidence

Confidence 100% · algorithm v1 · computed 2026-11-12. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
None known (OSV)
License
MIT
Install scripts
None
Build provenance
No provenance
Weekly downloads
292,471

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

0 issues mention this version in nestjs/nest so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the NestJS changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

New in this release

  • The Node adapter can set locals for every view.“feat(node): let the node adapter set locals for every view”
  • Handlers can now return a web response or a stream to be sent.“feat(core,common): send a web response or stream a handler returns”

AI-extracted from the official release notes and checked against the quoted text. Read the source

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 12.4.0 work for you?

Results appear once three developers have voted.

More @nestjs/core verdicts