MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-14274.json"