High severity vulnerability that affects electron (GHSA-gvcj-pfq2-wxj7)
Published: 2017-10-24T18:33:35Z
Aliases: CVE-2016-1202
Severity: HIGH · CWE: CWE-426

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line.

Affected packages:
package: ecosystem: npm
name: electron
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.33.5