NestJS 2 lifecycle
Current status
NestJS 2 is currently in standard support.
Security: 2 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.
Official lifecycle source: NestJS npm releases
- Support phase
- standard support
- End of life
- Not officially published
- Latest release
- 2.0.1
- Released
- 14 May 2017
At a glance
- Version line
- 2
- Initial release
- 14 May 2017
- Lifecycle phase
- standard support
- Latest stable
- 2.0.1
- Latest release date
- 14 May 2017
- EOL
- Not officially published
- Risk
- low
- Releases tracked
- 11
Lifecycle timeline
Phases from published LifecyclePeriod records. Missing phases are not inferred.
Release
14 May 2017
standard supportcurrent
14 May 2017 → —
Source: NestJS npm releases
NestJS 2 is currently in standard support.
Upgrade options
Newer supported NestJS version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.
You are on NestJS 2
Supported
Supported upgrade options
- NestJS 12Upgrade planner →Supported· 10 major versions newer
- NestJS 11Upgrade planner →Supported· 9 major versions newer
- NestJS 10Upgrade planner →Supported· 8 major versions newer
Security
Advisories affecting NestJS 2 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.
- Known vulnerabilities
- 2
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2026-35515GHSA-36xv-jgw5-4q75
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
- Affected:
- <11.1.18
- Fixed in:
- 11.1.18
- Source:
- OSV source · Advisory
- CVE-2023-26108GHSA-4jpv-8r57-pv7j
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
- Affected:
- <9.0.5
- Fixed in:
- 9.0.5
- Source:
- OSV source · Advisory
Latest release
Previous releases
2.0.2
14 May 2017
2.0.3
14 May 2017
2.0.0
14 May 2017
Release history
11 concrete releases tracked for this line.
| Version | Release date | Channel | Source |
|---|---|---|---|
| 2.0.0 | 14 May 2017 | stable | Source |
| 2.0.1 | 14 May 2017 | stable | Source |
| 2.0.2 | 14 May 2017 | stable | Source |
| 2.0.3 | 14 May 2017 | stable | Source |
| 2.0.4 | 14 May 2017 | stable | Source |
| 2.0.5 | 14 May 2017 | stable | Source |
| 2.0.6 | 23 May 2017 | stable | Source |
| 2.0.7 | 23 May 2017 | stable | Source |
| 2.1.0 | 23 May 2017 | stable | Source |
| 2.1.1 | 23 May 2017 | stable | Source |
| 2.1.2 | 24 May 2017 | stable | Source |
Release activity
- Total releases
- 11
- Last 30 days
- 0
- Last 90 days
- 0
- Avg. interval
- ~1 days
- Most recent
- 14 May 2017
Should I use this version?
Suitable for new deployments
NestJS 2 is currently supported (standard support).
Version comparison
Compact comparison against the nearest relevant release lines.
Sources
Where this information comes from.
Lifecycle sources
- NestJS npm releasesfirst party · high confidence
Official source: https://www.npmjs.com/package/@nestjs/core
Last verified 2 Sept 2026
- OSV.devfirst party
Official source: https://osv.dev
Verification time not recorded
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Verification time not recorded
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Verification time not recorded
Release sources
- NestJS npm releasesfirst party · high confidence
Official source: https://www.npmjs.com/package/@nestjs/core
Last verified 2 Sept 2026
Data coverage
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Releases tracked
- 11
- Lifecycle periods
- 1
- EOL
- Not officially published
- Provenance records
- 2
- Data last checked
- 2 Sept 2026
- Latest source update
- 2 Sept 2026
EOL: Not officially published