PM2 fails to start bat files in Windows because of Node.JS security updates

[natcl]

What's going wrong?

Node.JS has fixed a security vulnerability in Windows which breaks starting bat or cmd files in pm2 (see CVE-2024-27980).

This results in a EINVAL error when trying to start the process.

The fix is to add shell: true to the options here:

pm2/lib/God/ForkMode.js

Line 92 in 5e0eb40

var options = {

Le me know if you need more info !

Thanks !

[natcl]

Update: we tested the above fix and it works, however it seems to fail if the bat file is located in a path with a space in the directory name, not sure if shell: true has something to do with this or not.