w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6197.json"