CVEs affecting projects tracked on Release Alert, from NVD & OSV.
MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.