CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.