CVE-2022-25908: Create-Choo-Electron Project Create-Choo-Electron

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.

Affected products

• Create-Choo-Electron Project Create-Choo-Electron: any version

Published 2023-01-26. Last modified 2026-06-17.