Deprecation warning on Node.js 22+

[deffz-finesse]

Node.js Version

22+

NPM Version

11.5.1

Operating System

WSL

Subsystem

Other

Description

When running a NestJS application (v11.1.6) on Node.js 22 or Node.js 24, the following deprecation warning appears in the console:

(node:30302) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

Minimal Reproduction

npm i -g @nestjs/cli
nest new test-app

npm run start:dev

Output

(node:30302) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.

Before You Submit

• I have looked for issues that already exist before submitting this
• My issue follows the guidelines in the README file, and follows the 'How to ask a good question' guide at https://stackoverflow.com/help/how-to-ask

[avivkeller]

This is a NestJS problem, not a Node.js one