CVE-2025-24959 — zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.env`. This can lead to arbitrary command ex — CVE Database · The Intelligence Room