NR
Vendor
nrwl
6
CVEs
1
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104859 | NX nx nrwl | 7.3 | Oct 2 | Nx: OS command injection in the @nx/docker release pipeline |
| CVE-2026-104854 | NX nx nrwl | 8.5 | Oct 2 | Nx daemon and plugin worker sockets are accessible to other local users |
| CVE-2026-104853 | NX nx nrwl | 5.8 | Oct 2 | Nx: Path traversal in nx migrate package-migrations extraction |
| CVE-2026-71476 | NX nx nrwl | 8.7 | Aug 6 | Nx: Zip-Slip in the self-hosted remote cache |
| CVE-2026-54753 | NX nx nrwl | 5.9 | Jun 26 | Nx: `nx graph` dev server permissive CORS policy |
| CVE-2026-48027 RansomwareIn wildKEV | NX nx-console nrwl | 9.8 | May 27 | Compromised Nx Console version 18.95.0 |