TI-2026-50091 CVE-2026-71476 · GHSA-vp3h-ghgh-jr7g
Nx: Zip-Slip in the self-hosted remote cache
Priority MEDIUM 47
Nx is a monorepo solution for TypeScript and polyglot codebases.
nrwl
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
nrwl records in CISA KEVNo nrwl vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-66138 CVE-2026-104854 · GHSA-w3vv-58gj-gw77
Nx daemon and plugin worker sockets are accessible to other local users
Priority LOW 38
Nx is a monorepo solution for TypeScript and polyglot codebases.
TI-2026-82771 CVE-2026-119282 · GHSA-qm8w-vx34-5j9j
OS command injection in Nx @nx/maven and @nx/gradle via nx.json
Priority LOW 33
Nx is a monorepo solution for TypeScript and polyglot codebases.
TI-2026-66140 CVE-2026-104859 · GHSA-6vc5-vf29-ffr2
Nx: OS command injection in the @nx/docker release pipeline
Priority LOW 33
Nx is a monorepo solution for TypeScript and polyglot codebases.
TI-2026-39559 CVE-2026-54753 · GHSA-g2r8-wvmj-jf5w
Nx: `nx graph` dev server permissive CORS policy
Priority LOW 29
Nx is a monorepo solution for TypeScript and polyglot codebases.
TI-2026-66137 CVE-2026-104853 · GHSA-hrvq-x7jp-36xv
Nx: Path traversal in nx migrate package-migrations extraction
Priority LOW 25
Nx is a monorepo solution for TypeScript and polyglot codebases.