CVE-2025-24959

CVE-2025-24959 affects zx (versions prior to 8.3.2) due to an Environment Variable Injection flaw in dotenv.stringify, allowing an attacker controlling environment variable values to inject variables into process.env. Impact can include arbitrary command execution or unexpected behavior in securi...