fix(package-manager): prevent CWE-78 OS command injection across all Windows spawn paths#32892

Closed

g0w6y wants to merge 7 commits intoangular:mainfrom

g0w6y:fix/windows-spawn-command-injection

Commits on Mar 28, 2026

fix(package-manager): prevent command injection via shell metacharacters on Windows
g0w6y
committed
fix(cli): mitigate CWE-78 command injection on Windows
g0w6y
committed