Live data from GitHub and npm, updated daily.
Data last fetched: 2026-10-22
6 active CVEs reported via OSV.dev
`nx graph` dev server permissive CORS policy
Nx: Path traversal in nx migrate package-migrations extraction
Nx: Zip-Slip in the self-hosted remote cache
Nx: OS command injection via git revisions and remote refs
Nx daemon and plugin worker sockets are accessible to other local users
Malicious code in nx (npm)
Other Build Tool projects in the Node.js ecosystem worth evaluating.
Get SLA-backed support, security patches, and direct access to senior engineers for Nx — without relying on volunteer maintainers.