An issue in Prism Launcher up to v6.1 allows malicious users to perform a directory traversal via importing a crafted .mrpack file.
prismlauncher prism launcher