CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.