CVEs affecting projects tracked on Release Alert, from NVD & OSV.
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.