ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. NOTE: Multiple third parties have disputed this indicating upstream does not regard it as a security issue.
https://security.netapp.com/advisory/ntap-20240315-0006/
https://lists.gnu.org/archive/html/bug-ncurses/2023-06/msg00005.html