Unrated
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
CVE-2020-16608
First seen on SecPulse
References
- advisory github.com
- report sghosh2402.medium.com