Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.Referenceshttps://github.com/Fndroid/clash_for_windows_pkg/issues/2710
