npmPackage

@nx/gradle

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: 24.0.5 (Nov 6, 2026): no advisory affects it
Newest unaffected release: 24.0.5 (Nov 6, 2026), the latest release
Advisories: 1 · 1 high

Weekly downloads: 87K
Dependents: 0
Releases: 500+ since 20.8.3 (Nov 21, 2025)
Registry: npm
Releases read: Nov 8, 2026

Version timeline

CVE-2026-119282
Affects 21.3.12 to 22.7.8 (22.7.9 is outside it); 23.0.0 to 23.1.1 (23.1.2 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 1

CVE-2026-119282High 7.3
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
Affected: from 21.0.0, fixed in 22.7.9; from 23.0.0, fixed in 23.1.2.
Fixed in 22.7.9 (released Sep 1, 2026, 58 days before disclosure) and 23.1.2 (released Aug 26, 2026, 64 days before disclosure).
The latest release, 24.0.5, is not affected.
37% of @nx/gradle downloads last week were affected versions (42.1K).