CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.