Vendor
Nrwl
7 known vulnerabilities in products by Nrwl, 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48027 | Compromised Nx Console version 18.95.0 In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| High | CVE-2026-71476 | Nx: Zip-Slip in the self-hosted remote cache | — | |
| Medium | CVE-2026-54753 | Nx: `nx graph` dev server permissive CORS policy | 5.9 | |
| High | CVE-2026-104854 | Nx daemon and plugin worker sockets are accessible to other local users | — | |
| High | CVE-2026-104859 | Nx: OS command injection in the @nx/docker release pipeline | — | |
| High | CVE-2026-119282 | Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle | — | |
| Medium | CVE-2026-104853 | Nx: Path traversal in nx migrate package-migrations extraction | — |
Products
| Nx | 6 | 0 |