Against command injection vulnerabilities,
secure coding of Node.js defend.

Yoda
Node.js Secure Coding: Defending Against Command Injection Vulnerabilities