ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set to true.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "1.0.17"
}
]
}