CVE-2023-31874: Incorrect Permission Assignment for Critical Resource

Yank Note YN 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire'childprocess'...