CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Path traversal using symlink in npm harp module versions <= 0.29.0.