Get real-time updates on Telegram

Nx: Path traversal in nx migrate package-migrations extraction

CVE-2026-104853 affects nx. EPSS 0.00174 (percentile 0.06172), scored 2026-10-04. Affected range: >= 13.10.0, < 22.7.10. Fixed version: 22.7.10. Affected range: >= 23.0.0, < 23.2.1. Fixed version: 23.2.1.

Published 2026-10-06 00:14:27.367168+00:00

CVE

CVE-2026-104853

Product

nx

CCR priority

0.0 /100 (P5)

EPSS

0.00174 · percentile 0.06172 · 2026-10-04

KEV

no

Affected products

• nx · >= 13.10.0, < 22.7.10 · Fixed version: 22.7.10
• nx · >= 23.0.0, < 23.2.1 · Fixed version: 23.2.1

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-104853.html