CVE-2026-119282

The Nx monorepo solution is vulnerable to OS command injection in the @nx/maven and @nx/gradle plugins. The root cause is that project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command arguments without proper sanitization. Specifically, the @nx/maven...