Li4N0

**Name of the Vulnerable Software and Affected Versions** typora versions prior to 0.9.64 **Description** The issue allows for XSS, potentially leading to remote command execution, when rendering a mathematical formula in block mode. **Recommendations** For versions prior to 0.9.64, update to version 0.9.64 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** typora versions prior to 0.9.65 **Description** The issue allows for XSS, potentially leading to remote command execution, when typora renders a mathematical formula inline. **Recommendations** For versions prior to 0.9.65, update to version 0.9.65 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Typora versions prior to 0.9.9.20.3 beta **Description** The issue allows for XSS, which can lead to remote command execution, via the left outline bar. **Recommendations** For versions prior to 0.9.9.20.3 beta, update to a version that contains a fix for this issue.