ipdate

Author: Unitech

CHANGELOG.md

@@ -1,4 +1,10 @@
 
+## 6.0.14
+
+- Fixed version of @pm2/pm2-version-check #6055
+- CVE-2025-64718 Update js-yaml
+- replace fs.R_OK with fs.constants.T_OK #6012 #6019
+
 ## 6.0.13
 
 - Fix blessed package import

lib/API.js

@@ -209,7 +209,7 @@ class API {
       if (that.pm2_home.indexOf('.pm2') > -1)
         return cb(new Error('Destroy is not a allowed method on .pm2'));
 
-      fs.access(test_path, fs.R_OK, function(err) {
+      fs.access(test_path, fs.constants.R_OK, function(err) {
         if (err) return cb(err);
         debug('Deleting temporary folder %s', that.pm2_home);
         sexec(cmd, cb);

lib/Common.js

@@ -167,7 +167,7 @@ Common.prepareAppConf = function(opts, app) {
    */
   if (app.disable_source_map_support != true) {
     try {
-      fs.accessSync(app.pm_exec_path + '.map', fs.R_OK);
+      fs.accessSync(app.pm_exec_path + '.map', fs.constants.R_OK);
       app.source_map_support = true;
     } catch(e) {}
     delete app.disable_source_map_support;

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "pm2",
   "preferGlobal": true,
-  "version": "6.0.13",
+  "version": "6.0.14",
   "engines": {
     "node": ">=16.0.0"
   },
@@ -171,7 +171,7 @@
     "@pm2/agent": "~2.1.1",
     "@pm2/js-api": "~0.8.0",
     "@pm2/io": "Unitech/pm2-io-apm-otel",
-    "@pm2/pm2-version-check": "latest",
+    "@pm2/pm2-version-check": "^1.0.4",
     "ansis": "4.0.0-node10",
     "async": "3.2.6",
     "@pm2/blessed": "0.1.81",
@@ -196,7 +196,7 @@
     "source-map-support": "0.5.21",
     "sprintf-js": "1.1.2",
     "vizion": "~2.2.1",
-    "js-yaml": "4.1.0"
+    "js-yaml": "4.1.1"
   },
   "overrides": {
     "debug": "4.4.3"