@nx
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AWS S3 Remote Cache Plugin for Nx | 1 | – | Jun 10, 2025 |
| Azure Blob Remote Cache Plugin for Nx | 1 | – | Jun 10, 2025 |
| GCS Remote Cache Plugin for Nx | 1 | – | Jun 10, 2025 |
| gradle | 1 | – | Oct 29, 2026 |
| maven | 1 | – | Oct 29, 2026 |
| Shared File System Cache Plugin for Nx | 1 | – | Jun 10, 2025 |
Exploited and recent CVEs
- CVE-2026-119282 Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle 0.1%
- CVE-2026-119282 Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle 0.1%
- CVE-2025-36852 Build Cache Poisoning via Untrusted Pull Requests 0.3%
- CVE-2025-36852 Build Cache Poisoning via Untrusted Pull Requests 0.3%
- CVE-2025-36852 Build Cache Poisoning via Untrusted Pull Requests 0.3%
- CVE-2025-36852 Build Cache Poisoning via Untrusted Pull Requests 0.3%