Google Zx
2 CVEs affecting Google Zx. Latest disclosed: 2025-11-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13437 | | 2025-11-20 | When zx is invoked with --prefer-local=<path>, the CLI creates a symlink named ./node_modules pointing to <path>/node_modules. Due to a logic error in src/cli… | |
CVE-2025-24959 | | 2025-02-03 | zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.en… |