A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the environment.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8140.json"