Skip to content

Publish a new release to fix security issue #241

Open

Description

@fwielstra

Our (Gitlab) based security scanner flagged up an issue in Execa 1.0.0, which was in our dependency chain via shx and shelljs. Shelljs was fixed in April (shelljs/shelljs#1216) and it was updated in shx in May (0f1ea07), fixing the security issue, but the latest release of shx (0.4.0) was done in March.

Please publish a new version so that any users of shx can update. It's not a huge security issue for us, it's just the security dashboard being a bit panicky.

Activity

  1. added this to the v0.5.x milestone on Oct 17, 2025
  2. nfischer commented on Dec 25, 2025

    @nfischer
    Member

    It will be resolved by shelljs/shelljs#1208. shx v0.5 will include the shelljs fix.

  3. mishijima commented on Feb 26, 2026

    @mishijima

    Hello @nfischer,

    We were just wondering when will the v0.5 be released?

    Thank you.

  4. mrgrain commented on Apr 21, 2026

    @mrgrain

    @nfischer any updates on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesPull requests that update a dependency file

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions