# What changed in launch-editor

> 4 changes in launch-editor 2 from its official release notes, upgrade guides and advisories: 4 security. Each one cited. Sources checked 2026-10-27. HTML: https://unstale.sh/npm/launch-editor/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## launch-editor 2

### Security

- launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors (2.14.2) — [security advisory](https://github.com/advisories/GHSA-R825-W8MM-5PXW)
- launch-editor: escapeCmdArgs() omits % escaping on Windows (2.14.2) — [security advisory](https://github.com/advisories/GHSA-698V-4R3X-3VCV)
- launch-editor: `fs.existsSync()` existence check can be bypassed on Windows (2.14.2) — [security advisory](https://github.com/advisories/GHSA-587H-7WMJ-H5PM)
- launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows (2.14.1) — [security advisory](https://github.com/advisories/GHSA-V6WH-96G9-6WX3)