CVEs affecting projects tracked on Release Alert, from NVD & OSV.
NTP through 4.2.8p12 has a NULL Pointer Dereference.