CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.