7 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-24959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env...
bulk-release (2.15.30), zx-bulk-release (2.15.30) +1 more potentially affected by CVE-2025-24959 via zx (8.3.1)
zx NPM version 8.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on zx and may be impacted: - bulk-release 2.15.30 - zx-bulk-release 2.15.30 - zx-extra 3.0.28 Source cves: CVE-2025-24959 Source advisory: OSV:GHSA-QWP8-X4FF-5H87...
CVE-2025-24959
zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...
CVE-2025-24959
creationtimestamp| type| source ---|---|--- 2025-02-03 21:08:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113941997439072239 2025-02-03 21:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchn6jt5r2r 2025-02-03 22:08:28+00:00| seen|...
CVE-2025-24959 Environment Variable Injection for dotenv API in zx
zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...
CVE-2025-24959 Environment Variable Injection for dotenv API in zx
zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...
CVE-2025-24959 Environment Variable Injection for dotenv API in zx
zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...