CVEs affecting projects tracked on Release Alert, from NVD & OSV.
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.