What’s Vulnerable › Products
nrwl nx vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your nrwl nx version is affected
Latest nrwl nx vulnerabilities
- CVE-2026-119282 — Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle (CVSS 7.3)
- CVE-2026-104859 — Nx: OS command injection in the @nx/docker release pipeline (CVSS 7.3)
- CVE-2026-104854 — Nx daemon and plugin worker sockets are accessible to other local users (CVSS 8.5)
- CVE-2026-104853 — Nx: Path traversal in nx migrate package-migrations extraction (CVSS 5.8)
- CVE-2026-71476 — Nx: Zip-Slip in the self-hosted remote cache (CVSS 8.7)
- CVE-2026-54753 — Nx: `nx graph` dev server permissive CORS policy (CVSS 5.9)