Vulnerabilities

TI-2026-82771 CVE-2026-119282 · GHSA-qm8w-vx34-5j9j

OS command injection in Nx @nx/maven and @nx/gradle via nx.json

LOW 33

Nx is a monorepo solution for TypeScript and polyglot codebases.

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.0014 Published 2026-10-29 Fixed in 22.7.9, 23.1.2 CWE-78

TI-2026-66140 CVE-2026-104859 · GHSA-6vc5-vf29-ffr2

LOW 33

Nx is a monorepo solution for TypeScript and polyglot codebases.

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00148 Published 2026-10-02 Fixed in 22.7.8, 23.1.1 CWE-78

TI-2026-66138 CVE-2026-104854 · GHSA-w3vv-58gj-gw77

LOW 38

Nx is a monorepo solution for TypeScript and polyglot codebases.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00142 Published 2026-10-02 Fixed in 22.7.9, 23.1.2 CWE-269

TI-2026-66137 CVE-2026-104853 · GHSA-hrvq-x7jp-36xv

LOW 25

Nx is a monorepo solution for TypeScript and polyglot codebases.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00172 Published 2026-10-02 Fixed in 22.7.10, 23.2.1 CWE-22

TI-2026-50091 CVE-2026-71476 · GHSA-vp3h-ghgh-jr7g

MEDIUM 47

Nx is a monorepo solution for TypeScript and polyglot codebases.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00865 Published 2026-08-06 Fixed in 22.7.7, 23.0.2 CWE-22

TI-2026-39559 CVE-2026-54753 · GHSA-g2r8-wvmj-jf5w

LOW 29

Nx is a monorepo solution for TypeScript and polyglot codebases.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.01442 Published 2026-06-26 Partial fix · 22.7.2, 23.0.0-beta.2 CWE-749