Konga (< 2.1.0)

Konga versions before 2.1.0 are vulnerable to privilege escalation on Windows via an insecure library loading path that allows low-privileged local users to execute arbitrary code.