Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-23340.json"