NX
Product
nx
5
CVEs
0
On KEV
8.7
Max CVSS
3
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add nx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-71476 | 8.7 | Aug 6 | Nx: Zip-Slip in the self-hosted remote cache Affected: >= 20.8.0, < 22.7.7; >= 23.0.0, < 23.0.2 |
| CVE-2026-104854 | 8.5 | Oct 2 | Nx daemon and plugin worker sockets are accessible to other local users Affected: >= 14.6.0, < 22.7.9; >= 23.0.0, < 23.1.2 |
| CVE-2026-104859 | 7.3 | Oct 2 | Nx: OS command injection in the @nx/docker release pipeline Affected: >= 21.4.0, < 22.7.8; >= 23.0.0, < 23.1.1 |
| CVE-2026-54753 | 5.9 | Jun 26 | Nx: `nx graph` dev server permissive CORS policy Affected: >= 17.0.4, < 22.7.2; >= 23.0.0-beta.0, < 23.0.0-beta.2 |
| CVE-2026-104853 | 5.8 | Oct 2 | Nx: Path traversal in nx migrate package-migrations extraction Affected: >= 13.10.0, < 22.7.10; >= 23.0.0, < 23.2.1 |
Showing 5