Skip to content
OpenAdvisories

Package · npm

@nx/docker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2026-104859

    Nx: OS command injection in the @nx/docker release pipeline

    Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.r…

    nrwl nx @nx/docker npm