Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46168.json"