An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the domnodenormalize function
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51317.json"