GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40305.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "2.2.13" } ] } ]