Nx güvenlik açıkları (CVE)

Nx için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç

7.3Yüksek

CVE-2026-119282 14 gün önce

Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle

nrwl nx; @nx maven; @nx gradle

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin opti…

9.3Kritik

CVE-2026-48027 KEV Fidye yazılımında kullanılıyor 5 ay önce

Compromised Nx Console version 18.95.0

nrwl nx-console

Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX, …

1.8%EPSS

9.4Kritik

CVE-2025-36852 1 yıl önce

Build Cache Poisoning via Untrusted Pull Requests

Niklas Portmann Azure Based Remote Cache Plugin for Nx; Niklas Portmann Minio Based Remote Cache Plugin for Nx; Niklas Portmann Nx Remote Cache Utilities; Nx AWS S3 Remote Cache Plugin for Nx

A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud Storage, or similar object storage) that allows any contributor with pull request pri…