CVEs affecting projects tracked on Release Alert, from NVD & OSV.
ShowDoc v1.8.0 has XSS via a new page.