In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-30205.json"