mutt before 2.3.2 does not check for '\0' in urlpctdecode.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85602.json"