CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.