npmPackage

@nx/maven

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: 24.0.5 (Nov 6, 2026): no advisory affects it
Newest unaffected release: 24.0.5 (Nov 6, 2026), the latest release
Advisories: 1 · 1 high

Weekly downloads: 8,676
Dependents: 0
Releases: 500+ since 22.0.2 (Oct 28, 2025)
Registry: npm
Releases read: Nov 8, 2026

Version timeline

CVE-2026-119282
Affects 22.0.2 to 22.7.8 (22.7.9 is outside it); 23.0.0 to 23.1.1 (23.1.2 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 1

CVE-2026-119282High 7.3
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
Affected: from 22.0.2, fixed in 22.7.9; from 23.0.0, fixed in 23.1.2.
Fixed in 22.7.9 (released Sep 1, 2026, 58 days before disclosure) and 23.1.2 (released Aug 26, 2026, 64 days before disclosure).
The latest release, 24.0.5, is not affected.
22% of @nx/maven downloads last week were affected versions (2.7K).