CVEs affecting projects tracked on Release Alert, from NVD & OSV.
ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c.