CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.