search

raineorshine / npm-check-updates

Find newer versions of package dependencies than what your package.json allows
Other
9.19k stars 321 forks source link

Calls to spawn that include '.cmd' or '.bat' on windows should include '{shell: true}' argument #1429

Open phaze-ZA opened 3 weeks ago

phaze-ZA commented 3 weeks ago

This is due to the recent security patch released by node.js: https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2

Steps to Reproduce

Current Behavior

EINVAL error is thrown

Expected Behavior

Command is executed

raineorshine commented 3 weeks ago

Hi, thanks for reporting.

If there is a Windows user that would like to test a fix and open a PR that would be helpful.

phaze-ZA commented 3 weeks ago

Will set something up locally and do a thingy