KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-9359.json"