CVEs affecting projects tracked on Release Alert, from NVD & OSV.
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.