v11.1.14

nestjs/nestv11.1.14Feb 17, 2026by kamilmysliwiec

AI Summary

This patch release includes bug fixes for platform-fastify addressing a CVE related to middleware bypass, and fixes for the common module including logger context printing issues and requestOrigin type changes.

Key Highlights

Fix for fastify middleware bypass CVE (security)
Fixed logger printing invalid context when no stack trace provided
Changed requestOrigin type in common module

Full Release Notes

## v11.1.14 (2026-02-17)

#### Bug fixes
* `platform-fastify`
  * [#16384](https://github.com/nestjs/nest/pull/16384) fix(fastify): fastify middleware bypass cve ([@kamilmysliwiec](https://github.com/kamilmysliwiec))
* `common`
  * [#16307](https://github.com/nestjs/nest/pull/16307) fix: logger print invalid context when no stack trace provided ([@JulienDuf](https://github.com/JulienDuf))

#### Enhancements
* `common`
  * [#16314](https://github.com/nestjs/nest/pull/16314) fix(common): change requestOrigin type ([@SpencerKaiser](https://github.com/SpencerKaiser))

#### Committers: 5
- Julien Dufresne ([@JulienDuf](https://github.com/JulienDuf))
- Kamil Mysliwiec ([@kamilmysliwiec](https://github.com/kamilmysliwiec))
- Mykhailo Skrypsky ([@mixator](https://github.com/mixator))
- Spencer Kaiser ([@SpencerKaiser](https://github.com/SpencerKaiser))
- 조수민 ([@suuuuuuminnnnnn](https://github.com/suuuuuuminnnnnn))