Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-16281.json"