0Xbadca7

An authenticated Server-Side Request Forgery (SSRF) was discovered via the `JSON` data source. This issue provides flexibility in crafting HTTP requests, such as adding headers and selecting any HTTP verb. Possibly, other connectors are affected.

A mutation cross-site scripting issue leads to remote code execution through Mermaid code blocks. This occurs due to improper HTML sanitization when a file is opened in Typora, which is based on the Electron framework. The lack of proper sanitization allows for the execution of code in an unsandboxed environment.