Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').
gin project gin 0.7.4