CVEs affecting projects tracked on Release Alert, from NVD & OSV.
HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.