CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-05-27
Nx Console VS Code Extension Supply Chain Compromise and Malicious Code Injection (CVE-2026-48027)
[Affected Scope] Nx Console extension version 18.95.0 distributed via VS Code Marketplace and OpenVSX
[Impact] Execution of arbitrary malicious code within the developer's local environment, potentially leading to credential theft and full system compromise
[Mitigation] Immediately uninstall the compromised version 18.95.0 and upgrade to the clean version 18.100.0 or higher