CVEs affecting projects tracked on Release Alert, from NVD & OSV.
cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.