Known Vulnerabilities for Maven by @nx
Listed below are 10 of the newest known vulnerabilities associated with "Maven" by "@nx".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-119282 json | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from ... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110974 json | The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSONToken... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-110803 json | VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the bl... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-110737 json | The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Ori... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-107858 json | Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-107588 json | Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-102460 json | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability... | Not Provided | 2026-10-14 | 2026-10-19 |
| CVE-2026-100725 json | http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a BasicCookieStorage (client-sid... | Not Provided | 2026-09-27 | 2026-10-29 |
| CVE-2026-100724 json | http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses substring (Contains) matching on th... | Not Provided | 2026-09-27 | 2026-10-29 |
| CVE-2026-93598 json | ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1 contains an incomplete deny-list in the polyglot script... | Not Provided | 2026-09-18 | 2026-09-22 |