In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CREATE(Triage):(User=admin) CVE-2024-30202 (https://nvd.nist.gov/vuln/detail/CVE-2024-30202)