Skip to content
OpenAdvisories

Package · npm

@nx/azure-cache

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-71476

    Nx: Zip-Slip in the self-hosted remote cache

    Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path (MITM) …

    nrwl nx nx @nx/azure-cache npm
  • Critical 9.4
    CVE-2025-36852

    Build Cache Poisoning via Untrusted Pull Requests

    A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud Storage, or similar object storage) that allows any contributor with pull request pri…

    @nx Niklas Portmann Azure Based Remote Cache Plugin for Nx Nx Remote Cache Utilities npm