CVEs affecting projects tracked on Release Alert, from NVD & OSV.
KeePass 2.4.1 allows CSV injection in the title field of a CSV export.