The @nx/maven and @nx/gradle plugins for Nx have an OS command injection vulnerability due to unsafe interpolation of plugin options from nx.json into shell commands. This allows execution of arbitrary commands when running nx commands that construct the project graph. The vulnerability affects specific versions of these plugins and has been fixed in versions 22.7.9 and 23.1.2. Users should upgrade both the nx package and the affected plugins to these versions or later to remediate the issue.