CVEs affecting projects tracked on Release Alert, from NVD & OSV.
mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.