CVE-2025-53967 allows remote code execution via figma-developer-mpc command injection flaw Vulnerability stems from unvalidated input passed to shell commands using child_process.exec Users should ...

A command injection flaw was recently found in an npm package When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. CVE-2025-53967 allows remote code ...