CVEs affecting projects tracked on Release Alert, from NVD & OSV.
libpng before 1.6.32 does not properly check the length of chunks against the user limit.