VYPR

nx/s3-cache

by Nx

CVEs (1)

  • CVE-2026-71476HigAug 6, 2026
    risk 0.50cvss epss

    Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path (MITM) remote cache server…