fix(@angular/cli): ignore relative entries when resolving executables on PATH

Author: alan-agius4

packages/angular/cli/src/utilities/executable.ts

@@ -7,7 +7,7 @@
  */
 
 import { existsSync } from 'node:fs';
-import { delimiter, extname, join } from 'node:path';
+import { delimiter, extname, isAbsolute, join } from 'node:path';
 
 /**
  * Searches the `PATH` environment variable for a given executable binary name.
@@ -40,6 +40,9 @@ export function findExecutableOnPath(binaryName: string): string | undefined {
     }
 
     const dir = rawDir.startsWith('"') && rawDir.endsWith('"') ? rawDir.slice(1, -1) : rawDir;
+    if (!isAbsolute(dir)) {
+      continue;
+    }
 
     for (const ext of extensions) {
       const candidate = join(dir, binaryName + ext);

packages/angular/cli/src/utilities/executable_spec.ts

@@ -38,4 +38,15 @@ describe('findExecutableOnPath', () => {
       process.env.PATH = originalPath;
     }
   });
+
+  it('should ignore relative PATH entries', () => {
+    const originalPath = process.env.PATH;
+    try {
+      process.env.PATH = '.';
+      const resolved = findExecutableOnPath('node');
+      expect(resolved).toBeUndefined();
+    } finally {
+      process.env.PATH = originalPath;
+    }
+  });
 });