An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-16140.json"