Build failure in 4.x branch code on Windows #2114
Description
Discussed in #2111
Originally posted by tylerablackham November 21, 2025
I'm running into some issues building the code when I'm in the 4.x branch. From a new clone of the repo, I follow the instructions in the CONTRIBUTING.md file:
- I run
npm install - I clone the mustache spec
- Once I run
grunt, the build fails:
$ grunt
Running "clean:0" (clean) task
>> 0 paths cleaned.
Running "clean:1" (clean) task
>> 0 paths cleaned.
Running "clean:2" (clean) task
>> 0 paths cleaned.
Running "clean:3" (clean) task
>> 0 paths cleaned.
Running "parser" task
Fatal error: spawn EINVAL
I'm able to build fine when I'm in the master branch, but not when I'm in the 4.x branch. What can I do to fix this?
Info
This issue is caused by https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2#command-injection-via-args-parameter-of-child_processspawn-without-shell-option-enabled-on-windows-cve-2024-27980---high.