@Nx/Maven (>= 22.0.2, < 22.7.9; >= 23.0.0, < 23.1.2)

The @nx/maven and @nx/gradle plugins contain an OS command injection vulnerability where unsafely interpolated nx.json configuration options lead to arbitrary command execution during project-graph analysis.