CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.