typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.Referenceshttps://github.com/typora/typora-issues/issues/2129