node-cross-spawn icon indicating copy to clipboard operation
node-cross-spawn copied to clipboard

Deprecation warning on Node 24 [DEP0190]

Open Shaglock opened this issue 4 months ago • 0 comments

After upgrading to Node 24, I noticed the following deprecation warning:

(node:35671) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated

Looks like the problem is in this call https://github.com/moxystudio/node-cross-spawn/blob/master/index.js#L12

Shaglock avatar Aug 15 '25 13:08 Shaglock