Vulnerability in hash project

### Describe the bug While working on hash project, I scanned the dependency manifest and found that it uses a vulnerable version of **`@nestjs/core`**. The scan revealed an injection issue in Server-Sent Events handling, where unsanitized `type` and `id` fields can allow attackers to inject arbitrary events or manipulate SSE streams, potentially leading to spoofing or data injection. [CVE Report](https://vulert.com/vuln-scan/list/9b3f61bd-70fd-4ec9-a4e4-ad4f6eb4ffd4?sort_order=desc&sort_by=created_at) [CVE Link](https://vulert.com/vuln-db/CVE-2026-35515) ### To reproduce _No response_ ### Expected behavior _No response_ ### Device _No response_ ### Operating system _No response_ ### Browser _No response_ ### Additional context _No response_