Product by Nrwl
Nx
6 known vulnerabilities in Nx (Nrwl), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-71476 | Nx: Zip-Slip in the self-hosted remote cache | — | |
| Medium | CVE-2026-54753 | Nx: `nx graph` dev server permissive CORS policy | 5.9 | |
| High | CVE-2026-104854 | Nx daemon and plugin worker sockets are accessible to other local users | — | |
| High | CVE-2026-104859 | Nx: OS command injection in the @nx/docker release pipeline | — | |
| High | CVE-2026-119282 | Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle | — | |
| Medium | CVE-2026-104853 | Nx: Path traversal in nx migrate package-migrations extraction | — |