CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Moodle 3.5.x before 3.5.4 allows SSRF.