codeql/javascript/old-change-notes/2021-08-24-tainted-path-cwd.md

lgtm,codescanning

• The js/tainted-path query now recognizes the cwd option to shell invocations as a sink.