CVEs affecting projects tracked on Release Alert, from NVD & OSV.
GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.