CVEs affecting projects tracked on Release Alert, from NVD & OSV.
GitBook through 2.6.9 allows XSS via a local .md file.