-
-
Notifications
You must be signed in to change notification settings - Fork 213
Open
Description
Describe the bug
Not sure if this is occurring because of node, but the only script that gave me this warning so far was the gitmoji. The warning follows:
(node:36681) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
Reproduction
Install gitmoji
Use node 24 (I'm using --lts from nvm)
use gitmoji -c
place a title and confirm
System Info
System:
OS: Linux 6.14 Ubuntu 24.04.3 LTS 24.04.3 LTS (Noble Numbat)
CPU: (12) x64 13th Gen Intel(R) Core(TM) i5-1334U
Memory: 4.93 GB / 15.31 GB
Container: Yes
Shell: 5.9 - /usr/bin/zsh
Binaries:
Node: 24.11.0 - /home/<MY_USER>/.nvm/versions/node/v24.11.0/bin/node
npm: 11.6.2 - /home/<MY_USER>/.nvm/versions/node/v24.11.0/bin/npm
pnpm: 10.20.0 - /home/<MY_USER>/.local/share/pnpm/pnpm
Browsers:
Firefox: 144.0.2
Firefox Developer Edition: 144.0.2Validations
- Follow our Code of Conduct
- Read the Contributing Guide.
- Check that there isn't already an issue that reports the same bug to avoid creating duplicates.
- Check that this is a concrete bug. For Q&A, please open a GitHub Discussion instead.
- The provided reproduction is a minimal reproducible of the bug.
gluons
Metadata
Metadata
Assignees
Labels
No labels