Skip to content
OpenAdvisories

Vendor

nrwl

7 known vulnerabilities.

Products

nx 6 nx-console 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2026-104853

    Nx: Path traversal in nx migrate package-migrations extraction

    Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A ho…

    nrwl nx nx npm
  • Medium 5.9
    CVE-2026-54753

    Nx: `nx graph` dev server permissive CORS policy

    Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 and 23.0.0-beta.2, the local HTTP server started by nx graph sent Access-Control-Allow-Origin: * on every response, letting any website a developer visited read the serv…

    nrwl nx nx npm