Files
Ben Noordhuis 9095c914ed src: disallow direct .bat and .cmd file spawning
An undocumented feature of the Win32 CreateProcess API allows spawning
batch files directly but is potentially insecure because arguments are
not escaped (and sometimes cannot be unambiguously escaped), hence why
they are refused starting today.

PR-URL: https://github.com/nodejs-private/node-private/pull/562
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
CVE-ID: CVE-2024-27980
2024-04-10 09:18:30 -03:00
..
2024-03-07 10:27:31 +01:00
2023-08-15 13:45:44 +00:00
2023-01-29 17:43:20 +00:00
2023-08-15 13:45:34 +00:00
2024-02-19 14:14:39 +01:00
2023-08-15 13:45:44 +00:00
2023-08-15 13:45:44 +00:00
2023-09-29 18:26:27 +00:00
2023-11-23 10:15:46 +01:00
2020-12-29 15:49:09 +00:00
2023-12-15 15:26:18 -03:00
2023-02-21 15:33:28 +00:00
2023-05-17 08:57:21 +00:00
2023-01-10 05:38:36 +00:00
2023-08-15 13:45:44 +00:00
2023-08-15 13:45:44 +00:00
2023-09-28 13:01:30 +00:00