Skip to content
Nrwl vulnerabilities
Newest
-
@nx gradle, maven, nrwl nx +2 more
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
CVE-2026-119282
Fix available
7.3 High
-
nrwl nx
Nx: OS command injection in the @nx/docker release pipeline
CVE-2026-104859
Fix available
7.3 High
-
nrwl nx
Nx daemon and plugin worker sockets are accessible to other local users
CVE-2026-104854
Fix available
8.5 High
-
nrwl nx
Nx: Path traversal in nx migrate package-migrations extraction
CVE-2026-104853
Fix available
5.8 Medium
-
nrwl nx
Nx: Zip-Slip in the self-hosted remote cache
CVE-2026-71476
Fix available
8.7 High
-
nrwl nx
Nx: `nx graph` dev server permissive CORS policy
CVE-2026-54753
Fix available
5.9 Medium
-
nx console, nrwl nx-console +1 more
Compromised Nx Console version 18.95.0
CVE-2026-48027
In KEV
9.3 Critical