CVEs affecting projects tracked on Release Alert, from NVD & OSV.
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.