[KongchangAI]
Unverified50% confidenceFactExact time

When Node.js's exec() or spawn() is called with shell: true, the operating system first passes the entire command string to /bin/sh for parsing before execution.

1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/999582
API
curl https://kongchang.com/api/v1/knowledge/claims/999582
MCP
get_claim(id=999582)