Merge pull request #4595 from 418sec/master

pm2 - Command Injection - Fix:
Unitech · Mar 12, 2020 · ff77c6b · ff77c6b
2 parents 278d4b2 + bd20cf1
commit ff77c6b
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,4 +1,8 @@
 
+## 4.2.3
+
+- fix: Fix an import error on Node 9.x
+
 ## 4.2.2
 
 - feat: Support ESM on Node 13 via .mjs file or `"type":"module"` in package.json #4540

diff --git a/lib/API/Modules/Modularizer.js b/lib/API/Modules/Modularizer.js
@@ -20,6 +20,7 @@ var Modularizer = module.exports = {};
  * PM2 Module System.
  */
 Modularizer.install = function (CLI, module_name, opts, cb) {
+  module_name = module_name.replace(/[;`|]/g, "");
   if (typeof(opts) == 'function') {
     cb = opts;
     opts = {};

diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "pm2",
   "preferGlobal": true,
-  "version": "4.2.2",
+  "version": "4.2.3",
   "engines": {
     "node": ">=8.10.0"
   },