Vulnerabilities in nrwl
7 resultsCVE-2026-48027CRITICALCompromised Nx Console version 18.95.0EPSS 1.8%KEVCVE-2026-54753MEDIUMNx: `nx graph` dev server permissive CORS policyEPSS 1.4%CVE-2026-71476HIGHNx: Zip-Slip in the self-hosted remote cacheEPSS 0.9%CVE-2026-104853MEDIUMNx: Path traversal in nx migrate package-migrations extractionEPSS 0.2%CVE-2026-104859HIGHNx: OS command injection in the @nx/docker release pipelineEPSS 0.1%CVE-2026-104854HIGHNx daemon and plugin worker sockets are accessible to other local usersEPSS 0.1%CVE-2026-119282HIGHNx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradleEPSS 0.1%