Verified

ghsa:GHSA-W2VW-W76X-QR89: nx >= 14.0.0, < 22.7.8, >= 23.0.0, < 23.1.1

Nx: OS command injection via git revisions and remote refs. Affected range: >= 14.0.0, < 22.7.8. Fixed version: 22.7.8. Affected range: >= 23.0.0, < 23.1.1. Fixed version: 23.1.1.

Affected technology

nx · >= 14.0.0, < 22.7.8
Vendor not specified by the source

nx · >= 23.0.0, < 23.1.1
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 12-Oct-2026 10:15 UTC

Product: nx
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-w2vw-w76x-qr89.html