CVE-2026-22923

A vulnerability has been identified in NX All versions V2512, NX Managed Mode All versions V2512. The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially...

EUVD-2024-39266

Malicious code in bioql PyPI...

@alauda-fe/create-alauda-mfe-plugin (>=0.0.1 <=0.0.2), @apj-pace/pace-nx-plugin (>=0.0.2 <=0.0.5) +75 more potentially affected by CVE-2025-10894 via nx (>=20.0.0-beta.0 <=20.0.9)

nx NPM version =20.0.0-beta.0, =0.0.1, =0.0.2, =0.0.0, =0.5.0, =0.0.1, =0.0.25, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-canary.20240926-529ab94 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

@abelfubu/schematics (=0.1.1), @alfresco/aca-generators (>=1.0.0 <=1.0.1) +147 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.0.0-beta.0, =1.0.0, =1.0.0, =0.0.1, =11.0.0, =0.21.0, =0.0.1, =2.23.0, =0.3.53, =0.0.5, =0.0.4, =0.7.10, =0.7.29 - @edirect/nest-app =11.0.0 - @edirect/redis =11.0.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/config (>=0.0.4 <=0.0.34) +323 more potentially affected by CVE-2025-10894 via nx (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

nx NPM version =20.0.0-beta.0, =0.0.4, =0.0.47, =0.0.1, =8.1.1, =0.0.2, =0.0.4, =0.0.9, =0.0.0, =1.0.0, =1.0.0, =0.5.0, =0.18.3 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@alauda-fe/create-alauda-mfe-plugin (>=0.0.1 <=0.0.2), @apj-pace/pace-nx-plugin (>=0.0.2 <=0.0.5) +75 more potentially affected by CVE-2025-10894 via nx (>=20.0.0-beta.0 <=20.0.9)

nx NPM version =20.0.0-beta.0, =0.0.1, =0.0.2, =0.0.0, =0.5.0, =0.0.1, =0.0.25, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-canary.20240926-529ab94 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@abelfubu/schematics (=0.1.1), @aws/nx-plugin (>=0.21.0 <=0.51.4) +101 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

nx NPM version =21.0.0-beta.0, =0.21.0, =0.0.1, =0.3.53, =0.0.5, =0.0.4, =0.0.1, =0.1.0, =1.1.1, =2.1.1, =2.1.1, =2.1.4 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@abelfubu/schematics (=0.1.1), @aws/nx-plugin (>=0.21.0 <=0.52.0) +105 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.6.0-canary.20250926-7f4a8ea)

nx NPM version =21.0.0-beta.0, =0.21.0, =0.0.1, =0.3.53, =0.0.5, =0.0.4, =1.0.0, =3.22.0, =9.0.0-next.68, =0.0.1, =0.1.0, =0.1.1 - @hanspoo/global-types =0.1.9 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@alauda-fe/create-alauda-mfe-plugin (>=0.0.1 <=0.0.2), @apj-pace/pace-nx-plugin (>=0.0.2 <=0.0.5) +75 more potentially affected by CVE-2025-10894 via nx (>=20.0.0-beta.0 <=20.0.9)

nx NPM version =20.0.0-beta.0, =0.0.1, =0.0.2, =0.0.0, =0.5.0, =0.0.1, =0.0.25, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-canary.20240926-529ab94 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NX-12205542...

@abelfubu/schematics (=0.1.1), @alfresco/aca-generators (>=1.0.0 <=1.0.1) +147 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.0.0-beta.0, =1.0.0, =1.0.0, =0.0.1, =11.0.0, =0.21.0, =0.0.1, =2.23.0, =0.3.53, =0.0.5, =0.0.4, =0.7.10, =0.7.29 - @edirect/nest-app =11.0.0 - @edirect/redis =11.0.0 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NX-12205542...