CVEs affecting projects tracked on Release Alert, from NVD & OSV.
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.