Strict pnpm workspace app could not import an undeclared internal package subpath

CVE-2014-6271: Shellshock - Function definition injection via environment variables