An issue exists in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code Execution.
typora typora 0.9.67