Control: tags -1 + patch
Le 05/05/2020 à 13:36, y...@debian.org a écrit :
> Package: node-fbjs
> Severity: important
> Control: block 958403 by -1
>
> node-cross-spawn reimplement builtin Node.js functions
> child_process.sync and child_process.spawnSync compatible with
> Windows.
>
> This package has also some security holes. Please patch code to
> replace `cross-spawn.spawn` by `child_process.sync`
Succeed with:
- spawn = require('cross-spawn'),
+ spawn = require('child_process').spawn,
--
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
