Skip to content
OpenAdvisories

Package · Ubuntu

node-zx

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.0
    CVE-2025-24959

    Environment Variable Injection for dotenv API in zx

    zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.env`. This can lead to arbitrary command execution or unexpected behavior in applications that rely on…

    Google zx zx node-zx Ubuntu npm