Login Request a demo
NX
Product
nx
by nrwl · last CVE Oct 29, 2026
6
CVEs
0
On KEV
8.7
Max CVSS
4
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities6Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add nx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71476
8.7
1%
Aug 6
Nx: Zip-Slip in the self-hosted remote cache
Affected: >= 20.8.0, < 22.7.7; >= 23.0.0, < 23.0.2
CVE-2026-104854
8.5
0%
Oct 2
Nx daemon and plugin worker sockets are accessible to other local users
Affected: >= 14.6.0, < 22.7.9; >= 23.0.0, < 23.1.2
CVE-2026-119282
New
7.3–Oct 29
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
Affected: >= 21.0.0, < 22.7.9; >= 23.0.0, < 23.1.2
CVE-2026-104859
7.3
0%
Oct 2
Nx: OS command injection in the @nx/docker release pipeline
Affected: >= 21.4.0, < 22.7.8; >= 23.0.0, < 23.1.1
Showing 4