Known vulnerabilities in Google zx
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-13437 | When zx is invoked with --prefer-local=, the CLI creates a symlink named ./node_modules pointing to… | 5.6 Medium | Nov 20, 2025 |
| CVE-2025-24959 | zx is a tool for writing better scripts | 1.0 Low | Feb 3, 2025 |