Skip to content

Commit 2488ad4

Browse files
committed
Added configuration to fix breaking change for latest node versions cve-2024-27980
1 parent d15462c commit 2488ad4

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

prepare.ts

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,10 @@ const OVERRIDES_DIR = path.join(__dirname, 'overrides');
2929

3030
await spawn(process.platform === 'win32' ? 'npm.cmd' : 'npm', ['ci', '--production'], {
3131
cwd: path.join(OVERRIDES_DIR, 'js'),
32-
stdio: 'inherit'
32+
stdio: 'inherit',
33+
// Fix breaking change cve-2024-27980
34+
// https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2#command-injection-via-args-parameter-of-child_processspawn-without-shell-option-enabled-on-windows-cve-2024-27980---high
35+
shell: process.platform === 'win32',
3336
});
3437

3538
const files: Array<{

0 commit comments

Comments
 (0)