CVE-2022-36314 affects multiple packages. When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. See references for individual vulnerability details.