CVEs affecting projects tracked on Release Alert, from NVD & OSV.
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.