CVEs affecting projects tracked on Release Alert, from NVD & OSV.
An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.