CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.