Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.
CWE-20, CWE-116