Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-26948.json"