CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Ansible prior to 1.5.4 mishandles the evaluation of some strings.