SZB-037afc383b
EUVD-2026-113391 reports OS command injection in Nx Maven and Gradle plugins
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Nx
- Product
- Nx Maven and Gradle plugins
- First seen
Summary
The EUVD listing, citing a CVSS v3.1 score of 7.3, says the Nx /maven and /gradle packages contain an OS command injection flaw. The flaw is triggered through plugin options in nx.json.
If you use Nx
Check the Nx advisory for a fixed plugin version
Upgrade the Nx Maven and Gradle plugins to the patched release
Review nx.json plugin options for untrusted input
What the sources say 1
· Mastodon: “@ Nx /maven and @ Nx /gradle have OS command injection via nx.json plugin options” Source