Please report security issues to support@nestjs.com rather than in a public issue or pull request.

A good report includes:

• the version of @nestjs/authentication you found it in, and of Node.js,
• the steps or a short script that reproduce it,
• what an attacker could do with it.

Please give us a chance to release a fix before you disclose the issue publicly.