Nrwl Nx vulnerabilities

• @nx gradle, maven, nrwl nx +2 more Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle CVE-2026-119282 Fix available 7.3 HighOctober 29, 2026
• nrwl nx Nx: OS command injection in the @nx/docker release pipeline CVE-2026-104859 Fix available 7.3 HighOctober 2, 2026
• nrwl nx Nx daemon and plugin worker sockets are accessible to other local users CVE-2026-104854 Fix available 8.5 HighOctober 2, 2026
• nrwl nx Nx: Path traversal in nx migrate package-migrations extraction CVE-2026-104853 Fix available 5.8 MediumOctober 2, 2026
• nrwl nx Nx: Zip-Slip in the self-hosted remote cache CVE-2026-71476 Fix available 8.7 HighAugust 6, 2026
• nrwl nx Nx: `nx graph` dev server permissive CORS policy CVE-2026-54753 Fix available 5.9 MediumJune 26, 2026
• nx console, nrwl nx-console +1 more Compromised Nx Console version 18.95.0 CVE-2026-48027 In KEV 9.3 CriticalMay 27, 2026