2 issues skipped by the security teams:
- CVE-2018-6196: w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.
- CVE-2018-6197: w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/w/w3m.png){kind=link}