nrwl

Products

Exploited and recent CVEs

• CVE-2026-48027 Critical 9.3 Exploited Compromised Nx Console version 18.95.0 1.8%
• CVE-2026-119282 High 7.3 Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle 0.1%
• CVE-2026-104859 High 7.3 Nx: OS command injection in the @nx/docker release pipeline 0.1%
• CVE-2026-104854 High 8.5 Nx daemon and plugin worker sockets are accessible to other local users 0.1%
• CVE-2026-104853 Medium 5.8 Nx: Path traversal in nx migrate package-migrations extraction 0.2%
• CVE-2026-71476 High 8.7 Nx: Zip-Slip in the self-hosted remote cache 0.9%
• CVE-2026-54753 Medium 5.9 Nx: `nx graph` dev server permissive CORS policy 1.4%