CVEs affecting projects tracked on Release Alert, from NVD & OSV.
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.