tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-36152.json"