Google zx Schwachstellen (CVE)

Für Google zx veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
5.6Mittel
CVE-2025-13437

Arbitrary node_modules Directory Deletion in Google zx

Google zx

When zx is invoked with --prefer-local=<path>, the CLI creates a symlink named ./node_modules pointing to <path>/node_modules. Due to a logic error in src/cli.ts (linkNodeModules / cleanup), the function returns the target path instead of the alias (symlink p…

1.0Niedrig
CVE-2025-24959

Environment Variable Injection for dotenv API in zx

google zx

zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.env`. This can lead to arbitrary command execution or unexpected behavior in applications that rely on…