[4.0] `nuxt upgrade` in Windows displays "DEP0190" error
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- Half a day
- Newbie friendliness
- 45/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- node.js, nuxt, typescript
- Domain
- cli, developer-experience
Research direction
The warning comes from child_process spawn with shell: true on Windows when Node 24 runs nuxt upgrade, so start by finding where the CLI spawns the package manager command for the upgrade step. Reproduce on Windows or reason from the DEP0190 text, then check whether arguments can be passed as an array without a shell. Done when the upgrade runs on Node 24 without the DEP0190 warning and the Linux behaviour is unchanged.
Written by the indexing model from the issue text.
Description
On Windows OS with Node 24.21, I run bunx nuxt upgrade or npx nuxt upgrade I receive the following error message:
ERROR (node:15012) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
Workaround: Use "--disable-warning=DEP0190" to suppress the warning.
This appears to have started with Nuxt CLI 4.x as I don't recall previous versions displaying this error message recently. I don't see this message on a Linux OS.
Thank you.
- Dominant language
- TypeScript
- Stars
- 401
- Forks
- 123
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 71
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from nuxt/cli
-
Difficulty 3/5 1-2 days Newbie friendliness 40/100
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
Maintainers usually reply within 1 day
-
Support pause HMRMay be free again A pull request for this issue was closed without being merged. Open
Difficulty 4/5 3-5 days Newbie friendliness 35/100
Maintainers usually reply within 1 day
-
discussion
Difficulty 3/5 1-2 days Newbie friendliness 35/100
nuxt/cli#1166 · 7 comments · 2 reactions ·
Maintainers usually reply within 1 day
-
Feature request: Ability to overload and customise the templatesPossibly taken @oritwoen claimed this 64 days ago. Openenhancement good first issue
Difficulty 5/5 Over a week Newbie friendliness 35/100
nuxt/cli#1136 · 1 comment · 1 reaction ·
Maintainers usually reply within 1 day
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
chrisparsons83/flexspotff#215 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
vitest-dev/vitest#11633 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
Maintainers usually reply within 1 day