samurai 1.2 has a NULL pointer dereference in writefile() in util.c via a crafted build file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-30218.json"