Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13421.json"
[ { "events": [ { "introduced": "0" }, { "fixed": "2018-07-06" } ] } ]