CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.