CVEs affecting projects tracked on Release Alert, from NVD & OSV.
evince is missing a check on number of pages which can lead to a segmentation fault