NestJS 9 lifecycle
Current status
NestJS 9 is currently in standard support.
Security: 2 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.
Official lifecycle source: NestJS npm releases
- Support phase
- standard support
- End of life
- Not officially published
- Latest release
- 9.0.2
- Released
- 11 Jul 2022
At a glance
- Version line
- 9
- Initial release
- 8 Jul 2022
- Lifecycle phase
- standard support
- Latest stable
- 9.0.2
- Latest release date
- 11 Jul 2022
- EOL
- Not officially published
- Risk
- low
- Releases tracked
- 37
Lifecycle timeline
Phases from published LifecyclePeriod records. Missing phases are not inferred.
Release
8 Jul 2022
standard supportcurrent
8 Jul 2022 → —
Source: NestJS npm releases
NestJS 9 is currently in standard support.
Upgrade options
Newer supported NestJS version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.
You are on NestJS 9
Supported
Supported upgrade options
- NestJS 12Upgrade planner →Supported· 3 major versions newer
- NestJS 11Upgrade planner →Supported· 2 major versions newer
- NestJS 10Upgrade planner →Supported· 1 major version newer
Security
Advisories affecting NestJS 9 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.
- Known vulnerabilities
- 2
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2026-35515GHSA-36xv-jgw5-4q75
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
- Affected:
- <11.1.18
- Fixed in:
- 11.1.18
- Source:
- OSV source · Advisory
- CVE-2023-26108GHSA-4jpv-8r57-pv7j
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
- Affected:
- <9.0.5
- Fixed in:
- 9.0.5
- Source:
- OSV source · Advisory
Latest release
Previous releases
9.0.3
12 Jul 2022
9.0.4
18 Jul 2022
9.0.1
8 Jul 2022
Release history
37 concrete releases tracked for this line.
| Version | Release date | Channel | Source |
|---|---|---|---|
| 9.0.1 | 8 Jul 2022 | stable | Source |
| 9.0.2 | 11 Jul 2022 | stable | Source |
| 9.0.3 | 12 Jul 2022 | stable | Source |
| 9.0.4 | 18 Jul 2022 | stable | Source |
| 9.0.5 | 20 Jul 2022 | stable | Source |
| 9.0.6 | 28 Jul 2022 | stable | Source |
| 9.0.7 | 28 Jul 2022 | stable | Source |
| 9.0.8 | 3 Aug 2022 | stable | Source |
| 9.0.9 | 11 Aug 2022 | stable | Source |
| 9.0.10 | 16 Aug 2022 | stable | Source |
| 9.0.0 | 8 Jul 2022 | stable | Source |
| 9.1.3 | 5 Oct 2022 | stable | Source |
| 9.1.4 | 5 Oct 2022 | stable | Source |
| 9.1.5 | 21 Oct 2022 | stable | Source |
| 9.1.6 | 24 Oct 2022 | stable | Source |
| 9.2.0 | 7 Nov 2022 | stable | Source |
| 9.2.1 | 29 Nov 2022 | stable | Source |
| 9.3.0 | 1 Feb 2023 | stable | Source |
| 9.3.1 | 1 Feb 2023 | stable | Source |
| 9.3.11 | 21 Mar 2023 | stable | Source |
| 9.3.12 | 22 Mar 2023 | stable | Source |
| 9.4.0 | 5 Apr 2023 | stable | Source |
| 9.4.1 | 16 May 2023 | stable | Source |
| 9.4.2 | 23 May 2023 | stable | Source |
| 9.4.3 | 12 Jun 2023 | stable | Source |
Release activity
- Total releases
- 37
- Last 30 days
- 0
- Last 90 days
- 0
- Avg. interval
- ~9 days
- Most recent
- 11 Jul 2022
Should I use this version?
Suitable for new deployments
NestJS 9 is currently supported (standard support).
Version comparison
Compact comparison against the nearest relevant release lines.
Sources
Where this information comes from.
Lifecycle sources
- NestJS npm releasesfirst party · high confidence
Official source: https://www.npmjs.com/package/@nestjs/core
Last verified 2 Sept 2026
- OSV.devfirst party
Official source: https://osv.dev
Verification time not recorded
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Verification time not recorded
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Verification time not recorded
Release sources
- NestJS npm releasesfirst party · high confidence
Official source: https://www.npmjs.com/package/@nestjs/core
Last verified 2 Sept 2026
Data coverage
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Releases tracked
- 37
- Lifecycle periods
- 1
- EOL
- Not officially published
- Provenance records
- 2
- Data last checked
- 2 Sept 2026
- Latest source update
- 2 Sept 2026
EOL: Not officially published
