CVE-2024-31784

An issue in Typora (v.1.8.10 and before) allows a local attacker to obtain sensitive information and execute arbitrary code . This is achieved by providing a crafted payload to the src component . As a temporary workaround for versions 1.8.10 and earlier, it is recommended to restrict access to t...