Skip to content
nrwl nx
-
CVE-2026-119282
High 7.3
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
0.1%
-
CVE-2026-104859
High 7.3
Nx: OS command injection in the @nx/docker release pipeline
0.1%
-
CVE-2026-104854
High 8.5
Nx daemon and plugin worker sockets are accessible to other local users
0.1%
-
CVE-2026-104853
Medium 5.8
Nx: Path traversal in nx migrate package-migrations extraction
0.2%
-
CVE-2026-71476
High 8.7
Nx: Zip-Slip in the self-hosted remote cache
0.9%
-
CVE-2026-54753
Medium 5.9
Nx: `nx graph` dev server permissive CORS policy
1.4%