In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-37107.json"