CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Gravity before 0.5.1 does not support a maximum recursion depth.